Out-of-bounds read In thunderbird
Description
Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | =1:128.13.0esr-1 || =1:128.14.0esr-1 || =1:128.14.0esr-1~deb11u1 || =1:128.14.0esr-1~deb12u1 || =1:128.14.0esr-1~deb13u1 || =1:129.0~b6-1 || =1:130.0~b3-1 || =1:132.0~b6-1 || =1:135.0-1 || =1:136.0-1 || =1:137.0-1 || =1:138.0-1 || =1:140.0.1esr-1 || =1:140.1.0esr-1 || =1:140.1.1esr-1 || =1:140.10.0esr-1 || =1:140.10.0esr-1~deb11u1 || =1:140.10.0esr-1~deb12u1 || =1:140.10.0esr-1~deb13u1 || =1:140.10.1esr-1 || =1:140.10.1esr-1~deb11u1 || =1:140.10.1esr-1~deb12u1 || =1:140.10.1esr-1~deb13u1 || =1:140.10.2esr-1 || =1:140.10.2esr-1~deb11u1 || =1:140.10.2esr-1~deb12u1 || =1:140.10.2esr-1~deb13u1 || =1:140.11.0esr-1 || =1:140.11.0esr-1~deb11u1 || =1:140.11.0esr-1~deb12u1 || =1:140.11.0esr-1~deb13u1 || =1:140.12.0esr-1 || =1:140.12.0esr-1~deb11u1 || =1:140.12.0esr-1~deb12u1 || =1:140.12.0esr-1~deb13u1 || =1:140.13.0esr-1 || =1:140.13.0esr-2 || =1:140.13.0esr-2~deb11u1 || =1:140.13.0esr-2~deb12u1 || =1:140.13.0esr-2~deb13u1 || =1:140.14.0esr-1 || =1:140.14.0esr-1~deb11u1 || =1:140.14.0esr-1~deb12u1 || =1:140.14.0esr-1~deb13u1 || =1:140.15.0esr-1~deb12u1 || =1:140.15.0esr-1~deb13u1 || =1:140.16.0esr-1~deb12u1 || =1:140.16.0esr-1~deb13u1 || =1:140.17.0esr-1~deb12u1 || =1:140.17.0esr-1~deb13u1 || =1:140.2.0esr-1 || =1:140.3.0esr-1 || =1:140.3.0esr-1~deb11u1 || =1:140.3.0esr-1~deb12u1 || =1:140.3.0esr-1~deb13u1 || =1:140.3.1esr-1 || =1:140.4.0esr-1 || =1:140.4.0esr-1~deb11u1 || =1:140.4.0esr-1~deb12u1 || =1:140.4.0esr-1~deb13u1 || =1:140.5.0esr-1 || =1:140.5.0esr-1~deb11u1 || =1:140.5.0esr-1~deb12u1 || =1:140.5.0esr-1~deb13u1 || =1:140.6.0esr-1 || =1:140.6.0esr-1~deb11u1 || =1:140.6.0esr-1~deb12u1 || =1:140.6.0esr-1~deb13u1 || =1:140.7.0esr-1 || =1:140.7.0esr-1~deb11u1 || =1:140.7.0esr-1~deb12u1 || =1:140.7.0esr-1~deb13u1 || =1:140.7.1esr-1 || =1:140.7.1esr-1~deb11u1 || =1:140.7.1esr-1~deb12u1 || =1:140.7.1esr-1~deb13u1 || =1:140.8.0esr-1 || =1:140.8.0esr-1~deb11u1 || =1:140.8.0esr-1~deb12u1 || =1:140.8.0esr-1~deb13u1 || =1:140.9.0esr-1 || =1:140.9.0esr-1~deb11u1 || =1:140.9.0esr-1~deb12u1 || =1:140.9.0esr-1~deb13u1 || =1:140.9.1esr-1 || =1:140.9.1esr-1~deb11u1 || =1:140.9.1esr-1~deb12u1 || =1:140.9.1esr-1~deb13u1 || =1:143.0.1-1 || =1:144.0.1-1 || =1:148.0.1-1 || =1:149.0.2-1 || =1:152.0-1 || =1:153.0.1esr-1 || =1:153.0.3esr-1 || =1:153.1.0esr-1 || =1:153.2.0esr-1 || >=0 <1:153.3.0esr-1 | 1:153.3.0esr-1 |
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.