Mozilla Firefox and Thunderbird Memory Corruption Vulnerability via JavaScript Text Segmentation

A memory corruption vulnerability has been identified in Mozilla Firefox versions prior to 134, Firefox ESR versions prior to 128.6, and Thunderbird versions prior to 134 and Thunderbird ESR versions prior to 128.6. This vulnerability arises when specially crafted text is segmented, leading to memory corruption that could cause a crash, potentially exploitable under certain conditions.

Impact

Exploitation of this vulnerability can lead to a crash of the application, with the potential for exploitation in a browser context.

Remediation

Users can upgrade to Firefox 134, Thunderbird 134, Firefox ESR 128.6, or Thunderbird ESR 128.6 to address this vulnerability.