Mozilla Thunderbird

JIT miscompilation in the JavaScript: WebAssembly component

Integer overflow in the Networking: JAR component

A bug in WebAssembly code generation could result in a crash

Integer overflow in the Graphics: ImageLib component

Other issue in the WebRTC component

Calendar invitation attachments could launch local executables

Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

Incorrect boundary conditions in the WebRTC: Audio/Video component

Incorrect boundary conditions in the Graphics: ImageLib component

Incorrect boundary conditions in the Web Audio component

Undefined behavior in the DOM: Core & HTML component

Sandbox escape due to incorrect boundary conditions in the Graphics component

Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2

Internally found bugs fixed in Thunderbird ESR 153.1 and Thunderbird 154

Incorrect boundary conditions in the Audio/Video: GMP component

Use-after-free in the Graphics: Text component

Use-after-free in the Graphics: ImageLib component

Use-after-free in the DOM: Bindings (WebIDL) component

Use-after-free in the JavaScript Engine: JIT component

Use-after-free in the JavaScript: GC component

Use-after-free in the JavaScript Engine component

JIT miscompilation, use-after-free in the JavaScript Engine: JIT component

Use-after-free in the Audio/Video: Playback component

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the JavaScript Engine component

Incorrect boundary conditions in the Audio/Video: Playback component

Uninitialized memory in the Audio/Video: Web Codecs component

Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Use-after-free in the WebRTC: Signaling component

Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.

Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149

Use-after-free in the DOM: Core & HTML component

Use-after-free in the JavaScript: WebAssembly component

Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7

Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2

Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

Incorrect boundary conditions in the Networking: JAR component