CVE-2024-6600

EUVD-2024-47664
Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
mozillafirefox_esr
𝑥
< 115.13
mozillafirefox
𝑥
< 128.0
mozillathunderbird
𝑥
< 115.13
mozillathunderbird
116.0 ≤
𝑥
< 128.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firefox
sid
146.0.1-1
fixed
firefox-esr
bookworm
128.14.0esr-1~deb12u1
fixed
bookworm (security)
140.6.0esr-1~deb12u1
fixed
bullseye
115.14.0esr-1~deb11u1
fixed
bullseye (security)
140.6.0esr-1~deb11u1
fixed
forky
140.5.0esr-1
fixed
sid
140.6.0esr-1
fixed
trixie
140.4.0esr-1~deb13u1
fixed
trixie (security)
140.6.0esr-1~deb13u1
fixed
thunderbird
bookworm
1:128.14.0esr-1~deb12u1
fixed
bookworm (security)
1:140.6.0esr-1~deb12u1
fixed
bullseye
1:115.12.0-1~deb11u1
fixed
bullseye (security)
1:140.6.0esr-1~deb11u1
fixed
forky
1:140.6.0esr-1
fixed
sid
1:140.6.0esr-1
fixed
trixie
1:140.4.0esr-1~deb13u1
fixed
trixie (security)
1:140.6.0esr-1~deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
focal
dne
jammy
not-affected
mantic
not-affected
noble
not-affected
thunderbird
focal
dne
jammy
not-affected
mantic
ignored
noble
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaFirefox
suse enterprise desktop 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise desktop 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise desktop 15 SP7
128.1.0-150200.152.146.1
fixed
suse enterprise sap 12 SP5
128.1.0-112.221.1
fixed
suse enterprise sap 15 SP2
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP3
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP4
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP7
128.1.0-150200.152.146.1
fixed
suse enterprise server 12 SP3
128.1.0-112.221.1
fixed
suse enterprise server 12 SP5
128.1.0-112.221.1
fixed
suse enterprise server 15 SP2
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP3
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP4
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP7
128.1.0-150200.152.146.1
fixed
MozillaFirefox-branding-SLE-128
suse enterprise desktop 15 SP5
150200.9.16.1
fixed
suse enterprise desktop 15 SP6
150200.9.16.1
fixed
suse enterprise desktop 15 SP7
150200.9.16.1
fixed
suse enterprise sap 12 SP5
35.15.1
fixed
suse enterprise sap 15 SP2
150200.9.16.1
fixed
suse enterprise sap 15 SP3
150200.9.16.1
fixed
suse enterprise sap 15 SP4
150200.9.16.1
fixed
suse enterprise sap 15 SP5
150200.9.16.1
fixed
suse enterprise sap 15 SP6
150200.9.16.1
fixed
suse enterprise sap 15 SP7
150200.9.16.1
fixed
suse enterprise server 12 SP3
35.15.1
fixed
suse enterprise server 12 SP5
35.15.1
fixed
suse enterprise server 15 SP2
150200.9.16.1
fixed
suse enterprise server 15 SP3
150200.9.16.1
fixed
suse enterprise server 15 SP4
150200.9.16.1
fixed
suse enterprise server 15 SP5
150200.9.16.1
fixed
suse enterprise server 15 SP6
150200.9.16.1
fixed
suse enterprise server 15 SP7
150200.9.16.1
fixed
MozillaFirefox-devel
suse enterprise desktop 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise desktop 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise sap 12 SP5
128.1.0-112.221.1
fixed
suse enterprise sap 15 SP2
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP3
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP4
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise server 12 SP3
128.1.0-112.221.1
fixed
suse enterprise server 12 SP5
128.1.0-112.221.1
fixed
suse enterprise server 15 SP2
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP3
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP4
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP6
128.1.0-150200.152.146.1
fixed
MozillaFirefox-translations-common
suse enterprise desktop 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise desktop 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise desktop 15 SP7
128.1.0-150200.152.146.1
fixed
suse enterprise sap 12 SP5
128.1.0-112.221.1
fixed
suse enterprise sap 15 SP2
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP3
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP4
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP7
128.1.0-150200.152.146.1
fixed
suse enterprise server 12 SP3
128.1.0-112.221.1
fixed
suse enterprise server 12 SP5
128.1.0-112.221.1
fixed
suse enterprise server 15 SP2
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP3
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP4
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP7
128.1.0-150200.152.146.1
fixed
MozillaFirefox-translations-other
suse enterprise desktop 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise desktop 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise desktop 15 SP7
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP2
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP3
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP4
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise sap 15 SP7
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP2
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP3
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP4
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP5
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP6
128.1.0-150200.152.146.1
fixed
suse enterprise server 15 SP7
128.1.0-150200.152.146.1
fixed
MozillaThunderbird
suse enterprise desktop 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise desktop 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise desktop 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP7
128.2.3-150200.8.177.1
fixed
MozillaThunderbird-translations-common
suse enterprise desktop 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise desktop 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise desktop 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP7
128.2.3-150200.8.177.1
fixed
MozillaThunderbird-translations-other
suse enterprise desktop 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise desktop 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise desktop 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise sap 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise server 15 SP7
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP5
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP6
128.2.3-150200.8.177.1
fixed
suse enterprise workstation 15 SP7
128.2.3-150200.8.177.1
fixed
Common Weakness Enumeration
References
https://bugzilla.mozilla.org/show_bug.cgi?id=1888340
https://www.mozilla.org/security/advisories/mfsa2024-29/
https://www.mozilla.org/security/advisories/mfsa2024-30/
https://www.mozilla.org/security/advisories/mfsa2024-31/
https://www.mozilla.org/security/advisories/mfsa2024-32/
https://bugzilla.mozilla.org/show_bug.cgi?id=1888340
https://www.mozilla.org/security/advisories/mfsa2024-29/
https://www.mozilla.org/security/advisories/mfsa2024-30/
https://www.mozilla.org/security/advisories/mfsa2024-31/
https://www.mozilla.org/security/advisories/mfsa2024-32/