CVE-2024-4765

8.1HIGH

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code

Опубликовано: 5/14/2024Обновлено: 4/4/2025
Посмотреть на NVDПосмотреть на MITRE

Описание

Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite another application's manifest. This could have been exploited to run arbitrary code in another application's context. *This issue only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox < 126.

ИИ-АнализНа базе ИИ

Затронутые продукты

mozillafirefox

Ссылки