CVE Database
/

CVE-2024-4765

Back to search

CVE-2024-4765

Published: May 14, 2024

Modified: Aug 29, 2024

PUBLISHED

Description

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.

VendorProductVersions

Mozilla

Firefox

affected
unspecified - < 126

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now