CVE-2024-6614: 
NixOS vulnerability analysis and mitigation

CVE-2024-6614 is a vulnerability discovered in Mozilla Firefox and Thunderbird browsers where the frame iterator could get stuck in a loop when encountering certain WebAssembly (wasm) frames, leading to incorrect stack traces. This vulnerability affects Firefox versions prior to 128 and Thunderbird versions prior to 128, and was disclosed on July 9, 2024 (Mozilla Advisory).

The vulnerability is classified as a loop with unreachable exit condition (infinite loop) issue, identified as CWE-835. According to the CVSS 3.1 scoring system, it has been assigned a base score of 4.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N (NVD).

The vulnerability results in incorrect stack traces when certain WebAssembly frames are encountered. While classified as low impact by Mozilla, it could potentially affect debugging and error tracking capabilities in affected versions of Firefox and Thunderbird (Mozilla Advisory).

The vulnerability has been fixed in Firefox 128 and Thunderbird 128. Users are advised to update their browsers to these versions or later to mitigate the issue. For Ubuntu 20.04 LTS users, the fix is available in firefox version 128.0+build2-0ubuntu0.20.04.1 (Ubuntu Notice).