Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Potential Arbitrary Code Execution

A vulnerability has been identified in Mozilla Firefox and Thunderbird applications, specifically in versions prior to 141, several different Firefox ESR versions, and corresponding Thunderbird ESR versions. This vulnerability arises from memory safety issues that could lead to memory corruption. While these flaws generally cannot be exploited through email in Thunderbird due to disabled scripting, they pose potential risks in browser or browser-like contexts.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution.

Remediation

Users can upgrade to Firefox 141, Thunderbird 141, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1 or Thunderbird ESR 140.1 to address this vulnerability.