2024-04-16 15:14:07
mozilla
PUBLISHED
It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox < 125.