CVE-2024-0741 PoC — Mozilla Firefox 安全漏洞

Source

https://github.com/HyHy100/Firefox-ANGLE-CVE-2024-0741

Associated Vulnerability

Title: Mozilla Firefox 安全漏洞 (CVE-2024-0741)
Description:An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Description

PoC for an OOB write vulnerability I reported to Mozilla in ANGLE Translator (aka WebGL Shader Compiler).

Readme

Fixed in Firefox 123.

Fix: https://source.chromium.org/chromium/_/chromium/angle/angle/+/f8fae1ff4fae14fc6ba0aa1dc3af2e13a6e9a597.

Cherry-pick: https://github.com/mozilla/angle/commit/ddaf44ac75d5d0390873c2af193e02159ecbe672

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →