suse · CVE-2024-7527

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2024-7527 severity important: SUSE including 37 source package names (MozillaFirefox-128.1.0-112.221.1, MozillaFirefox-128.1.0-150200.152.146.1, …), 190 product×package rows across 52 product lines (Container suse/kiosk/firefox-esr, Image SLES12-SP5-SAP-Azure-LI-BYOS-Production, … (52 product lines)): Fixed 190.

Description:

Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.