CVE-2014-1575: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 33.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to improper interaction between threading and garbage collection in the GCRuntime::triggerGC function in js/src/jsgc.cpp, and unknown other vectors.

Affected products

• Mozilla Firefox: up to and including 32.0; version 30.0 only; version 31.0 only; version 31.1.0 only

Published 2014-10-15. Last modified 2026-06-17.