VULNERABILITY INTELLIGENCE

CVE-2024-8385

CVSS score9.8 CRITICAL

EPSS probability0.57%

CISA KEVNot currently listed

Published2024-09-03

Last modified2026-06-17

Description

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.