Mozilla Firefox and Thunderbird Just-In-Time Compiler Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the Just-In-Time (JIT) compiler of the JavaScript engine used in Mozilla Firefox and Thunderbird. This vulnerability affects Firefox versions prior to 148, Firefox ESR versions prior to 115.33 and 140.8, as well as Thunderbird versions prior to 148 and 140.8. The issue arises from JIT miscompilation, which can lead to memory corruption and potentially allow for arbitrary code execution.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, allowing for memory corruption and the possibility of executing arbitrary code.

Remediation

Users can upgrade to Firefox 148, Firefox ESR 140.8, or Thunderbird 148 to address this vulnerability.