Mozilla Firefox and Thunderbird WebTransport Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the content process side of a WebTransport connection in Mozilla Firefox and Thunderbird. This issue can lead to a potentially exploitable crash. The vulnerability affects Firefox versions prior to 136, Firefox ESR versions prior to 115.21 and 128.8, as well as Thunderbird versions prior to 136 and 128.8.

Impact

Exploitation of this vulnerability can cause a crash, with the potential for exploitation to execute arbitrary code.

Remediation

Users can upgrade to Firefox 136, Firefox ESR 115.21 or 128.8, or Thunderbird 136 or 128.8 to address this vulnerability.