Mozilla Firefox and Thunderbird Compartment Mismatch Vulnerability When Parsing JavaScript JSON Module

A vulnerability exists in Mozilla Firefox versions prior to 134, Firefox ESR versions prior to 128.6, and Thunderbird versions prior to 134 and 128.6. This vulnerability arises from a compartment mismatch that can occur when a JavaScript module is parsed as JSON, potentially leading to cross-compartment access and a use-after-free condition.

Impact

Exploitation of this vulnerability could result in a use-after-free condition, commonly associated with memory corruption issues that can be exploited to execute arbitrary code.

Remediation

Users can upgrade to Firefox 134, Firefox ESR 128.6, Thunderbird 134, or Thunderbird 128.6 to address this vulnerability.