CVE-2024-4774: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. This vulnerability affects Firefox < 126.

Affected products

• Mozilla Firefox: before 126.0 (fixed in 126.0)

Published 2024-05-14. Last modified 2026-06-17.