Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Potential Arbitrary Code Execution

A vulnerability exists in Mozilla Firefox and Thunderbird due to memory safety issues. This vulnerability is present in Firefox versions prior to 138, Firefox ESR versions prior to 128.10, and Thunderbird versions prior to 138 and 128.10. Some of these memory safety bugs showed signs of memory corruption, and it is presumed that, with enough effort, they could have been exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution.

Remediation

Users can upgrade to Firefox 138, Thunderbird 138, Firefox ESR 128.10, or Thunderbird 128.10 to address this vulnerability.