Critical · published May 18, 2025
🚨 An out-of-bounds read or write on a JavaScript `Promise` object? That's a sneaky way for attackers to disrupt your code execution! 🔥 Think of it like a waiter at a restaurant who mistakenly serves a dish from the wrong table. Instead of delivering your order, they accidentally hand over someone else's meal, potentially leading to a chaotic mix-up in the kitchen! If exploited, an attacker could manipulate the `Promise` object, leading to unexpected behavior in web applications. This can cause crashes, data corruption, or even a pathway for further attacks! Your security could go from zero to chaos in a heartbeat!
Think of it like a waiter at a restaurant who mistakenly serves a dish from the wrong table. Instead of delivering your order, they accidentally hand over someone else's meal, potentially leading to a chaotic mix-up in the kitchen! This vulnerability allows an out-of-bounds read or write on a JavaScript `Promise` object, which could be leveraged to execute malicious scripts or disrupt the function of legitimate applications.
If exploited, an attacker could manipulate the `Promise` object, leading to unexpected behavior in web applications. This can cause crashes, data corruption, or even a pathway for further attacks! Your security could go from zero to chaos in a heartbeat! To protect yourself, immediately update Firefox to version 138.0.4 or the relevant version for Firefox ESR or Thunderbird as listed. Ensuring your software is up-to-date is crucial for maintaining your security! 🛡️ You've got this! By taking these quick action steps, you'll be fortifying your defenses in no time! 🚀
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 115.23.1 | 115.23.1 |
| mozilla/firefox | < 138.0.4 | 138.0.4 |
| mozilla/firefox | ≥ 116.0, < 128.10.1 | 128.10.1 |
| mozilla/thunderbird | < 128.10.2 | 128.10.2 |
| mozilla/thunderbird | ≥ 138.0, < 138.0.2 | 138.0.2 |