CVE-2024-3859: 
NixOS vulnerability analysis and mitigation

CVE-2024-3859 is a security vulnerability discovered in Firefox, Firefox ESR, and Thunderbird affecting versions prior to Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. The vulnerability involves integer overflows in 32-bit versions that lead to out-of-bounds reads when processing malformed OpenType fonts (Mozilla Advisory, NVD).

The vulnerability occurs in the OpenTypeSTAT::Parse() function where integer overflows in calculations involving designAxesOffset, designAxisCount, and designAxisSize parameters can lead to out-of-bounds reads. This issue specifically affects 32-bit platforms where size_t is 32 bits, allowing arithmetic operations to wrap around and bypass boundary checks. The CVSS 3.1 base score is 5.9 (Medium) with vector CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N (NVD).

The vulnerability could potentially trigger out-of-bounds reads through malformed OpenType fonts, which could lead to crashes (denial of service) or potentially expose sensitive information. The impact is rated as moderate by Mozilla (Mozilla Advisory).

The vulnerability requires a specially crafted malformed OpenType font to trigger the integer overflow condition. The attack complexity is considered high, requiring no privileges but does need user interaction. The vulnerability has been assigned CWE-125 (Out-of-bounds Read) and CWE-190 (Integer Overflow or Wraparound) classifications (NVD).

The vulnerability has been fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Users are advised to upgrade to these versions or later to mitigate the risk. The fix includes improved bounds-checking arithmetic to prevent potential overflows (Mozilla Advisory).