PatchGap
Firefox · Core

CVE-2024-11706

Logic Error in Core
Low firefox Logic Error

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactlow
DescriptionA null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the <code>SEC_ASN1DecodeItem_Util</code> function, when handling malformed or improperly formatted input files.
ComponentCore
Bug ClassLogic Error
Tracker1923767
CISA KEVNot listed
CreditedMarc Schoenefeld
Disclosed2024-11-26

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page