PatchGap
Firefox · Core

CVE-2024-11706

Logic Error in Core
Low CVSS 6.5 firefox Logic Error

Overview

Low
Severity
6.5
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactlow
DescriptionA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the <code>SEC_ASN1DecodeItem_Util</code> function, when handling malformed or improperly formatted input files.
ComponentCore
Bug ClassLogic Error
Tracker1923767
CWECWE-476 (NULL pointer deref)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA KEVNot listed
CreditedMarc Schoenefeld
Disclosed2024-11-26

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page