Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Potential Arbitrary Code Execution

A vulnerability has been identified in Mozilla Firefox and Thunderbird applications, specifically in versions prior to 134, with certain Thunderbird versions also affected prior to 128.6. This vulnerability arises from memory safety issues that could lead to memory corruption. While these flaws generally cannot be exploited through email in Thunderbird due to disabled scripting when reading mail, they pose potential risks in browser or browser-like contexts.

Impact

Exploitation of this vulnerability could lead to memory corruption, with evidence suggesting that such corruption could be leveraged to execute arbitrary code.

Remediation

Users can upgrade to Firefox 134, Thunderbird 134, Firefox ESR 128.6, or Thunderbird ESR 128.6 to address this vulnerability.