Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Arbitrary Code Execution

A vulnerability has been identified in Mozilla Firefox and Thunderbird applications, specifically in versions prior to 136, as well as in Firefox ESR versions prior to 128.8. This vulnerability arises from memory safety issues that could lead to memory corruption. While these flaws were not directly exploitable, there is a presumption that, with sufficient effort, they could have been manipulated to execute arbitrary code.

Impact

Exploitation of this vulnerability could have allowed for arbitrary code execution.

Remediation

Users can upgrade to Firefox 136, Thunderbird 136, Firefox ESR 128.8, or Thunderbird ESR 128.8 to address this vulnerability.