Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Arbitrary Code Execution

A vulnerability has been identified in Mozilla Firefox and Thunderbird applications, specifically in versions prior to 136, as well as in Firefox ESR versions prior to 115.21 and 128.8. This vulnerability arises from memory safety issues that have been fixed in the latest versions. Some of these memory safety bugs exhibited signs of memory corruption, leading to the presumption that they could be exploited to execute arbitrary code with sufficient effort.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution.

Remediation

Users can upgrade to Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, or Thunderbird 128.8 to address this vulnerability.