Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox_esr:128.1:*:*:*:*:*:*:*

part: a version: 128.1 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox Esr (bdc94ed7-a614-58b9-b7d5-0e4682d3ba68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox-esr purl2cpe 2026-06-01 10:17:53.494122
pkg:github/plasmazilla/firefox-esr purl2cpe 2026-06-01 10:17:53.494124
pkg:npm/firefox-binary purl2cpe 2026-06-01 10:17:53.494125
pkg:rpm/opensuse/firefox-esr purl2cpe 2026-06-01 10:17:53.494127

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8387 vulnerable 2026-06-03 14:58:18.319614 Details available
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.
Published: 2024-09-03T12:32:19.490Z
Updated: 2024-09-06T18:31:07.603Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.