Critical · published July 23, 2025
🔥 A crafty `br_table` instruction exploit could lead to incorrect computations on arm64 — an open invitation for mischief! Think of it as a restaurant with an overly complicated menu where a confused waiter takes your order wrong. The result? A dish that leaves everyone unsatisfied and perhaps even hungry for more... wait, no good! An attacker could trigger this vulnerability and cause the application to branch to incorrect memory locations, leading to crashes or unexpected behavior. It’s absolutely devastating, as this could compromise the integrity of processes relying on accurate computations — and who wants a broken branch in their code?
Think of it as a restaurant with an overly complicated menu where a confused waiter takes your order wrong. The result? A dish that leaves everyone unsatisfied and perhaps even hungry for more... wait, no good! This vulnerability stems from the `br_table` instruction in WebAssembly (WASM) where a label can be too far from the instruction, causing truncation in branch address calculations. This flaw can lead to unexpected program behavior on arm64 systems.
An attacker could trigger this vulnerability and cause the application to branch to incorrect memory locations, leading to crashes or unexpected behavior. It’s absolutely devastating, as this could compromise the integrity of processes relying on accurate computations — and who wants a broken branch in their code? To protect your systems, urgently upgrade to Firefox 141, Firefox ESR 115.26, 128.13, 140.1, or Thunderbird 141, 128.13, and 140.1. Staying updated is key! Always keep an eye out for patches and ensure your software is on the latest version. You've got this! Follow these steps, and you'll be back to safe browsing in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 115.26.0 | 115.26.0 |
| mozilla/firefox | < 141.0 | 141.0 |
| mozilla/firefox | ≥ 128.0, < 128.13.0 | 128.13.0 |
| mozilla/firefox | ≥ 140.0, < 140.1.0 | 140.1.0 |
| mozilla/thunderbird | < 128.13.0 | 128.13.0 |
| mozilla/thunderbird | < 141.0 | 141.0 |
| mozilla/thunderbird | ≥ 140.0, < 140.1.0 | 140.1.0 |