Critical · published December 9, 2025
🚨 A sneaky use-after-free flaw lurks in the Audio/Video GMP component of Firefox and Thunderbird! 🔥 Think of it like a movie theater giving away tickets for a show that’s already ended; once you’ve used the ticket (or the memory), it shouldn’t be valid anymore! But if that theater keeps accepting it, anyone can waltz in and take over the spotlight, leading to unexpected chaos. An attacker could potentially exploit this vulnerability to execute arbitrary code, gaining full control of your system. Imagine the devastation—malicious software could be installed, sensitive data could be compromised, and your online safety could be thrown out the window! This is a serious threat that demands immediate action.
Think of it like a movie theater giving away tickets for a show that’s already ended; once you’ve used the ticket (or the memory), it shouldn’t be valid anymore! But if that theater keeps accepting it, anyone can waltz in and take over the spotlight, leading to unexpected chaos. This use-after-free vulnerability occurs when memory is accessed after it has been freed, allowing malicious actors to execute arbitrary code in the context of the user. This flaw resides in the Audio/Video GMP component of Firefox and Thunderbird, and it has been addressed in versions 146 of both applications.
An attacker could potentially exploit this vulnerability to execute arbitrary code, gaining full control of your system. Imagine the devastation—malicious software could be installed, sensitive data could be compromised, and your online safety could be thrown out the window! This is a serious threat that demands immediate action. To protect your system, immediately update Firefox and Thunderbird to version 146 or later. Regularly check for updates and enable automatic updates to ensure you’re always running the most secure version possible. You've got this! With these updates, you’re taking charge of your security and making the internet a safer place! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 146.0 | 146.0 |
| mozilla/thunderbird | < 146.0 | 146.0 |