CVE-2024-11704 is a critical double-free vulnerability in Firefox and Thunderbird prior to version 133. The flaw occurs in the function sec_pkcs7_decoder_start_decrypt() when handling an error path, potentially causing the same symmetric key to be freed twice. This can lead to memory corruption, which may be exploited to compromise the affected applications.