Critical · published February 4, 2025
🔥 Memory safety bugs are lurking in Firefox and Thunderbird, and they could potentially expose you to arbitrary code execution! Think of these memory safety bugs like a poorly built bridge—looks fine on the surface, but if you push it hard enough, it could collapse and let anything through, including unwanted guests! An attacker could exploit these vulnerabilities to gain control over your system, leading to absolutely devastating consequences such as data theft or system compromise. With enough effort, a nefarious party could run arbitrary code and wreak havoc before you even know what hit you!
Think of these memory safety bugs like a poorly built bridge—looks fine on the surface, but if you push it hard enough, it could collapse and let anything through, including unwanted guests! This vulnerability arises from memory corruption issues found in specific versions of Firefox and Thunderbird, allowing attackers to potentially execute arbitrary code due to mishandled memory operations.
An attacker could exploit these vulnerabilities to gain control over your system, leading to absolutely devastating consequences such as data theft or system compromise. With enough effort, a nefarious party could run arbitrary code and wreak havoc before you even know what hit you! Update your Firefox to version 135 or Thunderbird to version 135 immediately. If you’re using the ESR versions, make sure to upgrade to Firefox ESR 115.20, Firefox ESR 128.7, or Thunderbird 128.7 to seal off these vulnerabilities. Don’t wait—patch up and secure your browser! You've got this! With these updates, you'll be a security hero in no time! 🦸
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 115.20.0 | 115.20.0 |
| mozilla/firefox | < 135.0 | 135.0 |
| mozilla/firefox | ≥ 128.1.0, < 128.7.0 | 128.7.0 |
| mozilla/thunderbird | ≥ 128.0.1, < 128.7.0 | 128.7.0 |
| mozilla/thunderbird | ≥ 131.0, < 135.0 | 135.0 |