Fix for : CVE-2024-9680: Use-after-free in Animation timeline
Version 131.0.2, first offered to Release channel users on October 9, 2024
Security Vulnerability fixed:
Impact : critical
Fixed in :
- Firefox 131.0.2
- Firefox ESR 115.16.1
- Firefox ESR 128.3.1
CVE-2024-9680: Use-after-free in Animation timeline
Reporter : Damien Schaeffer from ESET
Impact : critical
Description : An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild.
References
Bug 1923344