Mozilla Firefox and Thunderbird JIT Stack Data Exposure Vulnerability

A vulnerability exists in Firefox versions prior to 137 and Thunderbird versions prior to 137, allowing an attacker to read 32 bits of data that has leaked onto the stack in a Just-In-Time (JIT) compiled function. This issue arises from a JIT optimization bug related to varying stack slot sizes.

Impact

Exploitation of this vulnerability could lead to unauthorized reading of stack data, potentially allowing for further exploitation or information leakage.

Remediation

Users can upgrade to Firefox 137 or Thunderbird 137 to address this vulnerability.