High · published November 11, 2025
⚡ A use-after-free vulnerability is lurking in Firefox and Thunderbird's Audio/Video component! 🎉 Think of this like a restaurant where the kitchen mistakenly serves food you’ve already finished and cleared off your table — if you happen to take a bite, you might get a surprise you weren't expecting! An attacker exploiting this vulnerability could potentially execute arbitrary code, leading to catastrophic consequences like remote code execution or system crashes. That means, with just the right (or wrong) move, they could commandeer your system and access sensitive data or even corrupt it entirely! Yikes!
Think of this like a restaurant where the kitchen mistakenly serves food you’ve already finished and cleared off your table — if you happen to take a bite, you might get a surprise you weren't expecting! This use-after-free vulnerability occurs when a program continues to use memory that has already been freed, enabling attackers to exploit the flaw to execute malicious code. It’s a sneaky way for bad actors to manipulate system behavior unexpectedly.
An attacker exploiting this vulnerability could potentially execute arbitrary code, leading to catastrophic consequences like remote code execution or system crashes. That means, with just the right (or wrong) move, they could commandeer your system and access sensitive data or even corrupt it entirely! Yikes! Update your Firefox to version 145 or later, or for Thunderbird, make sure you’re using version 145 as well. It's crucial to ensure you're on those patched versions to prevent any potential exploits from happening! You've got this! Apply those updates and stay secure — the internet is counting on you! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 115.30.0 | 115.30.0 |
| mozilla/firefox | < 145.0 | 145.0 |
| mozilla/firefox | ≥ 140.0, < 140.5.0 | 140.5.0 |