CVE-2024-6602 is a memory corruption vulnerability in Mozilla Firefox and Firefox ESR caused by a mismatch between allocator and deallocator in the NSS component. This flaw affects Firefox versions prior to 128 and Firefox ESR versions prior to 115.13. The vulnerability has a critical CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Mozilla has fixed this issue in Firefox 128 and Firefox ESR 115.13.