VDB
DEBIAN-CVE-2024-2616
DEBIAN-CVE-2024-2616
PUBLISHED
CVSS 2.700000047683716 LOW
To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR < 115.9 and Thunderbird < 115.9.
Risk Scores
CVSS v3.1
2.700000047683716
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | firefox-esr | *, *, * |
| Debian:12 | thunderbird | 1:115.9.0-1~deb10u1, 1:115.9.0-1~deb11u1, * |
| Debian:11 | thunderbird | 110.0, 112.0, 113.0 |
| Debian:13 | firefox-esr | 0, 0 |
| Debian:14 | thunderbird | 0, 0 |
| Debian:14 | firefox-esr | 0, 0 |
| Debian:13 | thunderbird | 0, 0 |
| Debian:11 | firefox-esr | 91.3.0esr-2, 91.4.0esr-1, 91.4.1esr-1~deb11u1 |
Timeline
- Mar 19, 2024 CVE Published
- Apr 28, 2026 CVE Updated