Critical · published October 14, 2025
🔥 A nasty use-after-free in MediaTrackGraphImpl::GetInstance() could let bad actors take control of your system! ⚠️ Think of it like a waiter who keeps serving food from a table that was just cleared—eventually someone could sneak a bite before it's wiped clean. This flaw could let attackers access memory that's already been freed up, potentially executing their own malicious code! In a world where attackers can gain control of your system, the consequences are absolutely devastating! They could execute arbitrary code, leading to data breaches or system crashes. This is a critical vulnerability that could compromise user privacy and security.
Think of it like a waiter who keeps serving food from a table that was just cleared—eventually someone could sneak a bite before it's wiped clean. This flaw could let attackers access memory that's already been freed up, potentially executing their own malicious code! This use-after-free vulnerability allows for the exploitation of freed memory, enabling an attacker to manipulate the program's execution flow. Once an object is freed but its memory is still accessible, it can be tricked into running malicious code.
In a world where attackers can gain control of your system, the consequences are absolutely devastating! They could execute arbitrary code, leading to data breaches or system crashes. This is a critical vulnerability that could compromise user privacy and security. Patch your systems immediately to Firefox version 144, Thunderbird version 144, or the corresponding ESR versions. Ensuring you're on the latest software will protect your environment from this vulnerability. Don't forget to validate your configurations! You've got this! Stay vigilant, apply those patches, and you'll keep your systems safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 140.4.0 | 140.4.0 |
| mozilla/firefox | < 144.0 | 144.0 |
| mozilla/thunderbird | < 140.4.0 | 140.4.0 |
| mozilla/thunderbird | ≥ 141.0, < 144.0 | 144.0 |