Mozilla fixes Firefox zero-day actively exploited in attacks (www.bleepingcomputer.com)

submitted 1 month ago by yogthos@lemmy.ml to c/firefox@lemmy.ml

2 comments fedilink hide all child comments

top 2 comments

sorted by: hot top controversial new old

[-] 001Guy001@lemm.ee 5 points 1 month ago

This type of flaw occurs when memory that has been freed is still used by the program

Am I understanding correctly that a memory leak has been fixed? Though it says that it relates specifically to "Animation timelines", so does it mean that the fix only affects the (small?) portion of the memory that's been used by that feature? Or any memory that should get freed but wasn't previously?

[-] PoolloverNathan@programming.dev 1 points 1 month ago

Based on your quite, this is a use-after-free, meaning that despite Firefox marking the memory region as free to be reallocated, it continues to use the memory. This is dangerous as an attacker may be able to allocate in that region, leetting them change the old structure's values.

this post was submitted on 09 Oct 2024

25 points (100.0% liked)

Firefox

17938 readers

7 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago

MODERATORS

k_o_t@lemmy.ml