CVE-2024-9402 — firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3

Back Back to CVE browser

CRITICAL

firefox: thunderbird: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3

Published Oct 1, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 0.61%

Description

Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <131
Vendor Mozilla Product Firefox ESR Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <128.3
Vendor Mozilla Product Thunderbird Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <128.3
- Version
  unspecified
  Status
  affected
  Constraints
  <131

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
unspecified	affected	<131

Mozilla

Firefox ESR

n/a

Version	Status	Constraints
unspecified	affected	<128.3

Mozilla

Thunderbird

n/a

Version	Status	Constraints
unspecified	affected	<128.3
unspecified	affected	<131

Vendor Mozilla Product Firefox Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <131
Vendor Mozilla Product Firefox Esr Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <128.3
Vendor Mozilla Product Thunderbird Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <128.3
- Version
  0
  Status
  affected
  Constraints
  <131

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
0	affected	<131

Mozilla

Firefox Esr

n/a

Version	Status	Constraints
0	affected	<128.3

Mozilla

Thunderbird

n/a

Version	Status	Constraints
0	affected	<128.3
0	affected	<131

Red Hat Enterprise Linux 7 Extended Lifecycle Support

firefox-0:128.3.0-1.el7_9

Fixed · RHSA-2024:7702
Red Hat Enterprise Linux 8

firefox-0:128.3.0-1.el8_10

Fixed · RHSA-2024:7700
Red Hat Enterprise Linux 8

thunderbird-0:128.3.0-1.el8_10

Fixed · RHSA-2024:7699
Red Hat Enterprise Linux 8.2 Advanced Update Support

firefox-0:128.3.0-1.el8_2

Fixed · RHSA-2024:7646
Red Hat Enterprise Linux 8.2 Advanced Update Support

thunderbird-0:128.3.0-1.el8_2

Fixed · RHSA-2024:7856
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

firefox-0:128.3.0-1.el8_4

Fixed · RHSA-2024:7703
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

thunderbird-0:128.3.0-1.el8_4

Fixed · RHSA-2024:7854
Red Hat Enterprise Linux 8.4 Telecommunications Update Service

firefox-0:128.3.0-1.el8_4

Fixed · RHSA-2024:7703
Red Hat Enterprise Linux 8.4 Telecommunications Update Service

thunderbird-0:128.3.0-1.el8_4

Fixed · RHSA-2024:7854
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

firefox-0:128.3.0-1.el8_4

Fixed · RHSA-2024:7703
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

thunderbird-0:128.3.0-1.el8_4

Fixed · RHSA-2024:7854
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

firefox-0:128.3.0-1.el8_6

Fixed · RHSA-2024:7704
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

thunderbird-0:128.3.0-1.el8_6

Fixed · RHSA-2024:8169
Red Hat Enterprise Linux 8.6 Telecommunications Update Service

firefox-0:128.3.0-1.el8_6

Fixed · RHSA-2024:7704
Red Hat Enterprise Linux 8.6 Telecommunications Update Service

thunderbird-0:128.3.0-1.el8_6

Fixed · RHSA-2024:8169
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

firefox-0:128.3.0-1.el8_6

Fixed · RHSA-2024:7704
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

thunderbird-0:128.3.0-1.el8_6

Fixed · RHSA-2024:8169
Red Hat Enterprise Linux 8.8 Extended Update Support

firefox-0:128.3.0-1.el8_8

Fixed · RHSA-2024:7842
Red Hat Enterprise Linux 8.8 Extended Update Support

thunderbird-0:128.3.1-1.el8_8

Fixed · RHSA-2024:8166
Red Hat Enterprise Linux 9

firefox-0:128.3.0-1.el9_4

Fixed · RHSA-2024:7505
Red Hat Enterprise Linux 9

thunderbird-0:128.3.0-1.el9_4

Fixed · RHSA-2024:7552
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

firefox-0:128.3.0-1.el9_0

Fixed · RHSA-2024:7621
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

thunderbird-0:128.3.0-1.el9_0

Fixed · RHSA-2024:7855
Red Hat Enterprise Linux 9.2 Extended Update Support

firefox-0:128.3.0-1.el9_2

Fixed · RHSA-2024:7622
Red Hat Enterprise Linux 9.2 Extended Update Support

thunderbird-0:128.3.0-1.el9_2

Fixed · RHSA-2024:7853
Red Hat Enterprise Linux 10

firefox

Affected
Red Hat Enterprise Linux 10

thunderbird

Affected
Red Hat Enterprise Linux 6

firefox

Out of support scope
Red Hat Enterprise Linux 6

thunderbird

Out of support scope
Red Hat Enterprise Linux 7

thunderbird

Out of support scope
Red Hat Enterprise Linux 9

firefox-flatpak-container

Affected
Red Hat Enterprise Linux 9

thunderbird-flatpak-container

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7 Extended Lifecycle Support	firefox-0:128.3.0-1.el7_9	Fixed	RHSA-2024:7702
Red Hat Enterprise Linux 8	firefox-0:128.3.0-1.el8_10	Fixed	RHSA-2024:7700
Red Hat Enterprise Linux 8	thunderbird-0:128.3.0-1.el8_10	Fixed	RHSA-2024:7699
Red Hat Enterprise Linux 8.2 Advanced Update Support	firefox-0:128.3.0-1.el8_2	Fixed	RHSA-2024:7646
Red Hat Enterprise Linux 8.2 Advanced Update Support	thunderbird-0:128.3.0-1.el8_2	Fixed	RHSA-2024:7856
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	firefox-0:128.3.0-1.el8_4	Fixed	RHSA-2024:7703
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	thunderbird-0:128.3.0-1.el8_4	Fixed	RHSA-2024:7854
Red Hat Enterprise Linux 8.4 Telecommunications Update Service	firefox-0:128.3.0-1.el8_4	Fixed	RHSA-2024:7703
Red Hat Enterprise Linux 8.4 Telecommunications Update Service	thunderbird-0:128.3.0-1.el8_4	Fixed	RHSA-2024:7854
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	firefox-0:128.3.0-1.el8_4	Fixed	RHSA-2024:7703
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions	thunderbird-0:128.3.0-1.el8_4	Fixed	RHSA-2024:7854
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	firefox-0:128.3.0-1.el8_6	Fixed	RHSA-2024:7704
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	thunderbird-0:128.3.0-1.el8_6	Fixed	RHSA-2024:8169
Red Hat Enterprise Linux 8.6 Telecommunications Update Service	firefox-0:128.3.0-1.el8_6	Fixed	RHSA-2024:7704
Red Hat Enterprise Linux 8.6 Telecommunications Update Service	thunderbird-0:128.3.0-1.el8_6	Fixed	RHSA-2024:8169
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	firefox-0:128.3.0-1.el8_6	Fixed	RHSA-2024:7704
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	thunderbird-0:128.3.0-1.el8_6	Fixed	RHSA-2024:8169
Red Hat Enterprise Linux 8.8 Extended Update Support	firefox-0:128.3.0-1.el8_8	Fixed	RHSA-2024:7842
Red Hat Enterprise Linux 8.8 Extended Update Support	thunderbird-0:128.3.1-1.el8_8	Fixed	RHSA-2024:8166
Red Hat Enterprise Linux 9	firefox-0:128.3.0-1.el9_4	Fixed	RHSA-2024:7505
Red Hat Enterprise Linux 9	thunderbird-0:128.3.0-1.el9_4	Fixed	RHSA-2024:7552
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	firefox-0:128.3.0-1.el9_0	Fixed	RHSA-2024:7621
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	thunderbird-0:128.3.0-1.el9_0	Fixed	RHSA-2024:7855
Red Hat Enterprise Linux 9.2 Extended Update Support	firefox-0:128.3.0-1.el9_2	Fixed	RHSA-2024:7622
Red Hat Enterprise Linux 9.2 Extended Update Support	thunderbird-0:128.3.0-1.el9_2	Fixed	RHSA-2024:7853
Red Hat Enterprise Linux 10	firefox	Affected	n/a
Red Hat Enterprise Linux 10	thunderbird	Affected	n/a
Red Hat Enterprise Linux 6	firefox	Out of support scope	n/a
Red Hat Enterprise Linux 6	thunderbird	Out of support scope	n/a
Red Hat Enterprise Linux 7	thunderbird	Out of support scope	n/a
Red Hat Enterprise Linux 9	firefox-flatpak-container	Affected	n/a
Red Hat Enterprise Linux 9	thunderbird-flatpak-container	Affected	n/a

Remediation

Red Hat statement

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Metrics

0.61% 0.00615

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00615

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.61% (0.00615)	47.56th	v5 (v2026.06.15)
Jun 15, 2026	0.62% (0.00620)	44.77th	v5 (v2026.06.15)
Mar 17, 2025	0.26% (0.00263)	47.75th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00045)	17.70th	v3 (v2023.03.01)
Oct 2, 2024	0.04% (0.00045)	16.32th	v3 (v2023.03.01)

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-120

Classic Buffer Overflow

References (9)

https://access.redhat.com/security/cve/CVE-2024-9402
Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1872744%2C1897792%2C1911317%2C1913445%2C1914106%2C1914475%2C1914963%2C1915008%2C1916476
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2315951
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2024-9402
https://www.cve.org/CVERecord?id=CVE-2024-9402
https://www.mozilla.org/security/advisories/mfsa2024-46/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-47/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-49/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-50/
Vendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2024-9402		Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1872744%2C1897792%2C1911317%2C1913445%2C1914106%2C1914475%2C1914963%2C1915008%2C1916476		Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2315951		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2024-9402
https://www.cve.org/CVERecord?id=CVE-2024-9402
https://www.mozilla.org/security/advisories/mfsa2024-46/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-47/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-49/		Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-50/		Vendor Advisory