CVE-2024-11696 is a vulnerability in Firefox and Thunderbird where exceptions thrown by the loadManifestFromFile method during add-on signature verification were not properly handled. This flaw could cause runtime errors that disrupt signature validation, potentially allowing bypass of signature enforcement for unrelated add-ons. Signature validation is intended to prevent tampering with extensions by third-party applications. The issue affects Firefox versions prior to 133 and Thunderbird versions prior to 133, including Firefox ESR versions prior to 128.5 and Thunderbird ESR versions prior to 128.5. The vulnerability has a medium severity with a CVSS score of 5.4. Mozilla has fixed this issue in Firefox 133 and Thunderbird 133, as well as in Firefox ESR 128.5 and Thunderbird ESR 128.5.