Alpine/firefox-esr: high 7.5

When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulnerability affects Firefox < 123, Firefox E

Action: Upgrade firefox-esr to 115.8.0-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2024-1546#Alpine:v3.19/firefox-esr
• https://security.alpinelinux.org/vuln/CVE-2024-1546

published 2024-02-20T14:15:08.477Z · modified 2026-11-03T06:32:04.460383Z · JSON