CVE-2024-8389: 
NixOS vulnerability analysis and mitigation

Memory safety bugs were discovered in Firefox 129, identified as CVE-2024-8389. These vulnerabilities were reported by the Mozilla Fuzzing Team and Andrew McCreight, and showed evidence of memory corruption that could potentially be exploited to execute arbitrary code. The vulnerability affects Firefox versions prior to 130 (Mozilla Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 9.8 CRITICAL with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The issue is classified under CWE-787 (Out-of-bounds Write) and CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) (NVD).

The vulnerability could allow an attacker to execute arbitrary code in the context of the logged-on user. Depending on the user's privileges, an attacker could potentially install programs, view, change, or delete data, or create new accounts with full user rights (CIS Advisory).

The vulnerability has been fixed in Firefox 130. Users are advised to update their Firefox installations to version 130 or later to mitigate this security risk (Mozilla Advisory).