CVE-2024-7531

Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on an Intel Sandy Bridge processor. In Firefox this only affects the QUIC header protection feature when the connection is using the ChaCha20-Poly1305 cipher suite. The most likely outcome is connection failure, but if the connection persists despite the high packet loss it could be possible for a network observer to identify packets as coming from the same source despite a network path change. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1.

• CWE-367

• https://bugzilla.mozilla.org/show_bug.cgi?id=1905691Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2024-33/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2024-34/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2024-35/Vendor Advisory

Published

Aug 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7525It was possible for a web extension with minimal permissions…8.1
• CVE-2024-7526ANGLE failed to initialize parameters which lead to reading …6.5
• CVE-2024-7527Unexpected marking work at the start of sweeping could have …8.8
• CVE-2024-7528Incorrect garbage collection interaction in IndexedDB could …8.8
• CVE-2024-7529The date picker could partially obscure security prompts. Th…6.5
• CVE-2024-7530Incorrect garbage collection interaction could have led to a…8.8
• CVE-2024-7532Out of bounds memory access in ANGLE in Google Chrome prior …8.8
• CVE-2024-7533Use after free in Sharing in Google Chrome on iOS prior to 1…8.8
• CVE-2024-7534Heap buffer overflow in Layout in Google Chrome prior to 127…8.8
• CVE-2024-7535Inappropriate implementation in V8 in Google Chrome prior to…8.8
• CVE-2024-7536Use after free in WebAudio in Google Chrome prior to 127.0.6…8.8
• CVE-2024-7537oFono QMI SMS Handling Out-Of-Bounds Read Information Disclo…5.5