Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Arbitrary Code Execution

A vulnerability has been identified in Mozilla Firefox and Thunderbird that arises from memory safety issues. This vulnerability is present in multiple versions, including Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149, and Thunderbird 149. Some of these memory safety bugs showed signs of memory corruption, leading to the presumption that, with sufficient effort, they could be exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution.

Remediation

Users can upgrade to Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, or Thunderbird 140.10 to address this vulnerability.