CVE-2024-11691 Information

Description

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple’s GPU driver.
This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox < 133 Firefox ESR < 128.5 Firefox ESR < 115.18 Thunderbird < 133 and Thunderbird < 128.5.

Reference

https://bugzilla.mozilla.org/show_bug.cgi?id=1914707 https://bugzilla.mozilla.org/show_bug.cgi?id=1924184 https://www.mozilla.org/security/advisories/mfsa2024-63/ https://www.mozilla.org/security/advisories/mfsa2024-64/ https://www.mozilla.org/security/advisories/mfsa2024-65/ https://www.mozilla.org/security/advisories/mfsa2024-67/ https://www.mozilla.org/security/advisories/mfsa2024-68/