CVE-2024-3302

CVSS v3.1 3.7 (Low)

EPSS 0.04 % (11^th)

Advisories 26

NVD Status Awaiting Analysis

There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed. A server could abuse this to create an Out of Memory condition in the browser. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

CVE Status: PUBLISHED
NVD Status: Awaiting Analysis
CNA: Mozilla Corporation
Published Date: 2024-04-16 16:15:08
(5 months ago)
Updated Date: 2024-07-03 02:06:08
(2 months ago)