Improper resource allocation - Buffer overflow In firefox-esr
Description
Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 12 | =102.11.0esr-1 || =102.12.0esr-1 || =102.12.0esr-1~deb10u1 || =102.12.0esr-1~deb11u1 || =102.12.0esr-1~deb12u1 || =102.13.0esr-1 || =102.13.0esr-1~deb10u1 || =102.13.0esr-1~deb11u1 || =102.13.0esr-1~deb12u1 || =102.14.0esr-1~deb10u1 || =102.14.0esr-1~deb11u1 || =102.14.0esr-1~deb12u1 || =102.15.0esr-1~deb10u1 || =102.15.0esr-1~deb11u1 || =102.15.0esr-1~deb12u1 || =102.15.1esr-1~deb10u1 || =102.15.1esr-1~deb11u1 || =102.15.1esr-1~deb12u1 || =115.0.2esr-1 || =115.1.0esr-1 || =115.10.0esr-1 || =115.10.0esr-1~deb10u1 || =115.10.0esr-1~deb11u1 || =115.10.0esr-1~deb12u1 || =115.11.0esr-1 || =115.11.0esr-1~deb10u1 || =115.11.0esr-1~deb11u1 || =115.11.0esr-1~deb12u1 || =115.12.0esr-1 || =115.12.0esr-1~deb10u1 || =115.12.0esr-1~deb11u1 || =115.12.0esr-1~deb12u1 || =115.13.0esr-1 || =115.13.0esr-1~deb11u1 || =115.13.0esr-1~deb12u1 || =115.13.0esr-2 || =115.14.0esr-1 || =115.14.0esr-1~deb11u1 || =115.14.0esr-1~deb12u1 || =115.15.0esr-1 || =115.15.0esr-1~deb11u1 || =115.15.0esr-1~deb12u1 || =115.2.0esr-1 || =115.2.1esr-1 || =115.3.0esr-1 || =115.3.0esr-1~deb10u1 || =115.3.0esr-1~deb11u1 || =115.3.0esr-1~deb12u1 || =115.3.1esr-1~deb10u1 || =115.3.1esr-1~deb11u1 || =115.4.0esr-1 || =115.4.0esr-1~deb10u1 || =115.4.0esr-1~deb11u1 || =115.4.0esr-1~deb12u1 || =115.5.0esr-1 || =115.5.0esr-1~deb10u1 || =115.5.0esr-1~deb11u1 || =115.5.0esr-1~deb12u1 || =115.6.0esr-1 || =115.6.0esr-1~deb10u1 || =115.6.0esr-1~deb11u1 || =115.6.0esr-1~deb12u1 || =115.7.0esr-1 || =115.7.0esr-1~deb10u1 || =115.7.0esr-1~deb11u1 || =115.7.0esr-1~deb12u1 || =115.8.0esr-1 || =115.8.0esr-1~deb10u1 || =115.8.0esr-1~deb11u1 || =115.8.0esr-1~deb12u1 || =115.9.0esr-1 || =115.9.0esr-1~deb11u1 || =115.9.0esr-1~deb12u1 || =115.9.0esr-2 || =115.9.1esr-1 || =115.9.1esr-1~deb10u1 || =115.9.1esr-1~deb11u1 || =115.9.1esr-1~deb12u1 || =128.10.0esr-1 || =128.10.0esr-1~deb12u1 || =128.10.1esr-1 || =128.10.1esr-1~deb11u1 || =128.10.1esr-1~deb12u1 || =128.11.0esr-1 || =128.11.0esr-1~deb11u1 || =128.11.0esr-1~deb12u1 || =128.12.0esr-1 || =128.12.0esr-1~deb11u1 || =128.12.0esr-1~deb12u1 || =128.13.0esr-1 || =128.13.0esr-1~deb11u1 || =128.13.0esr-1~deb12u1 || =128.14.0esr-1 || =128.14.0esr-1~deb11u1 || =128.14.0esr-1~deb12u1 || =128.14.0esr-1~deb13u1 || =128.3.0esr-1 || =128.3.0esr-1~deb11u1 || =128.3.0esr-1~deb11u2 || =128.3.0esr-1~deb12u1 || =128.3.0esr-2 || =128.3.1esr-1 || =128.3.1esr-1~deb11u1 || =128.3.1esr-1~deb12u1 || =128.3.1esr-2 || =128.4.0esr-1 || =128.4.0esr-1~deb11u1 || =128.4.0esr-1~deb12u1 || =128.5.0esr-1 || =128.5.0esr-1~deb11u1 || =128.5.0esr-1~deb12u1 || =128.5.1esr-1 || =128.6.0esr-1 || =128.6.0esr-1~deb11u1 || =128.6.0esr-1~deb11u2 || =128.6.0esr-1~deb11u3 || =128.6.0esr-1~deb12u1 || =128.6.0esr-2 || =128.6.0esr-3 || =128.6.0esr-4 || =128.7.0esr-1 || =128.7.0esr-1~deb11u1 || =128.7.0esr-1~deb12u1 || =128.8.0esr-1 || =128.8.0esr-1~deb11u1 || =128.8.0esr-1~deb12u1 || =128.9.0esr-1 || =128.9.0esr-1~deb11u1 || =128.9.0esr-1~deb12u1 || =128.9.0esr-2 || =140.10.0esr-1 || =140.10.0esr-1~deb11u1 || =140.10.0esr-1~deb12u1 || =140.10.0esr-1~deb13u1 || =140.10.1esr-1 || =140.10.1esr-1~deb11u1 || =140.10.1esr-1~deb12u1 || =140.10.1esr-1~deb13u1 || =140.10.2esr-1 || =140.10.2esr-1~deb11u1 || =140.10.2esr-1~deb12u1 || =140.10.2esr-1~deb13u1 || =140.11.0esr-1 || =140.11.0esr-1~deb11u1 || =140.11.0esr-1~deb12u1 || =140.11.0esr-1~deb13u1 || =140.12.0esr-1~deb11u1 || =140.3.0esr-1 || =140.3.0esr-1~deb11u1 || =140.3.0esr-1~deb11u2 || =140.3.0esr-1~deb12u1 || =140.3.0esr-1~deb13u1 || =140.3.0esr-2 || =140.3.1esr-1 || =140.3.1esr-1~deb11u1 || =140.3.1esr-1~deb12u1 || =140.3.1esr-1~deb13u1 || =140.3.1esr-2 || =140.4.0esr-1 || =140.4.0esr-1~deb11u1 || =140.4.0esr-1~deb12u1 || =140.4.0esr-1~deb13u1 || =140.5.0esr-1 || =140.5.0esr-1~deb11u1 || =140.5.0esr-1~deb12u1 || =140.5.0esr-1~deb13u1 || =140.6.0esr-1 || =140.6.0esr-1~deb11u1 || =140.6.0esr-1~deb12u1 || =140.6.0esr-1~deb13u1 || =140.7.0esr-1 || =140.7.0esr-1~deb11u1 || =140.7.0esr-1~deb12u1 || =140.7.0esr-1~deb13u1 || =140.8.0esr-1 || =140.8.0esr-1~deb11u1 || =140.8.0esr-1~deb12u1 || =140.8.0esr-1~deb13u1 || =140.9.0esr-1 || =140.9.0esr-1~deb11u1 || =140.9.0esr-1~deb12u1 || =140.9.0esr-1~deb13u1 || =140.9.1esr-1 || =140.9.1esr-1~deb11u1 || =140.9.1esr-1~deb12u1 || =140.9.1esr-1~deb13u1 || >=0 <140.12.0esr-1~deb12u1 | 140.12.0esr-1~deb12u1 | |
debian 13 | =128.13.0esr-1 || =128.14.0esr-1 || =128.14.0esr-1~deb11u1 || =128.14.0esr-1~deb12u1 || =128.14.0esr-1~deb13u1 || =140.10.0esr-1 || =140.10.0esr-1~deb11u1 || =140.10.0esr-1~deb12u1 || =140.10.0esr-1~deb13u1 || =140.10.1esr-1 || =140.10.1esr-1~deb11u1 || =140.10.1esr-1~deb12u1 || =140.10.1esr-1~deb13u1 || =140.10.2esr-1 || =140.10.2esr-1~deb11u1 || =140.10.2esr-1~deb12u1 || =140.10.2esr-1~deb13u1 || =140.11.0esr-1 || =140.11.0esr-1~deb11u1 || =140.11.0esr-1~deb12u1 || =140.11.0esr-1~deb13u1 || =140.12.0esr-1~deb11u1 || =140.12.0esr-1~deb12u1 || =140.3.0esr-1 || =140.3.0esr-1~deb11u1 || =140.3.0esr-1~deb11u2 || =140.3.0esr-1~deb12u1 || =140.3.0esr-1~deb13u1 || =140.3.0esr-2 || =140.3.1esr-1 || =140.3.1esr-1~deb11u1 || =140.3.1esr-1~deb12u1 || =140.3.1esr-1~deb13u1 || =140.3.1esr-2 || =140.4.0esr-1 || =140.4.0esr-1~deb11u1 || =140.4.0esr-1~deb12u1 || =140.4.0esr-1~deb13u1 || =140.5.0esr-1 || =140.5.0esr-1~deb11u1 || =140.5.0esr-1~deb12u1 || =140.5.0esr-1~deb13u1 || =140.6.0esr-1 || =140.6.0esr-1~deb11u1 || =140.6.0esr-1~deb12u1 || =140.6.0esr-1~deb13u1 || =140.7.0esr-1 || =140.7.0esr-1~deb11u1 || =140.7.0esr-1~deb12u1 || =140.7.0esr-1~deb13u1 || =140.8.0esr-1 || =140.8.0esr-1~deb11u1 || =140.8.0esr-1~deb12u1 || =140.8.0esr-1~deb13u1 || =140.9.0esr-1 || =140.9.0esr-1~deb11u1 || =140.9.0esr-1~deb12u1 || =140.9.0esr-1~deb13u1 || =140.9.1esr-1 || =140.9.1esr-1~deb11u1 || =140.9.1esr-1~deb12u1 || =140.9.1esr-1~deb13u1 || >=0 <140.12.0esr-1~deb13u1 | 140.12.0esr-1~deb13u1 | |
debian 14 | =128.13.0esr-1 || =128.14.0esr-1 || =128.14.0esr-1~deb11u1 || =128.14.0esr-1~deb12u1 || =128.14.0esr-1~deb13u1 || =140.10.0esr-1 || =140.10.0esr-1~deb11u1 || =140.10.0esr-1~deb12u1 || =140.10.0esr-1~deb13u1 || =140.10.1esr-1 || =140.10.1esr-1~deb11u1 || =140.10.1esr-1~deb12u1 || =140.10.1esr-1~deb13u1 || =140.10.2esr-1 || =140.10.2esr-1~deb11u1 || =140.10.2esr-1~deb12u1 || =140.10.2esr-1~deb13u1 || =140.11.0esr-1 || =140.11.0esr-1~deb11u1 || =140.11.0esr-1~deb12u1 || =140.11.0esr-1~deb13u1 || =140.12.0esr-1~deb11u1 || =140.12.0esr-1~deb12u1 || =140.12.0esr-1~deb13u1 || =140.3.0esr-1 || =140.3.0esr-1~deb11u1 || =140.3.0esr-1~deb11u2 || =140.3.0esr-1~deb12u1 || =140.3.0esr-1~deb13u1 || =140.3.0esr-2 || =140.3.1esr-1 || =140.3.1esr-1~deb11u1 || =140.3.1esr-1~deb12u1 || =140.3.1esr-1~deb13u1 || =140.3.1esr-2 || =140.4.0esr-1 || =140.4.0esr-1~deb11u1 || =140.4.0esr-1~deb12u1 || =140.4.0esr-1~deb13u1 || =140.5.0esr-1 || =140.5.0esr-1~deb11u1 || =140.5.0esr-1~deb12u1 || =140.5.0esr-1~deb13u1 || =140.6.0esr-1 || =140.6.0esr-1~deb11u1 || =140.6.0esr-1~deb12u1 || =140.6.0esr-1~deb13u1 || =140.7.0esr-1 || =140.7.0esr-1~deb11u1 || =140.7.0esr-1~deb12u1 || =140.7.0esr-1~deb13u1 || =140.8.0esr-1 || =140.8.0esr-1~deb11u1 || =140.8.0esr-1~deb12u1 || =140.8.0esr-1~deb13u1 || =140.9.0esr-1 || =140.9.0esr-1~deb11u1 || =140.9.0esr-1~deb12u1 || =140.9.0esr-1~deb13u1 || =140.9.1esr-1 || =140.9.1esr-1~deb11u1 || =140.9.1esr-1~deb12u1 || =140.9.1esr-1~deb13u1 || >=0 <140.12.0esr-1 | 140.12.0esr-1 | |
 rpm rhel10 | <0:140.12.0-1.el10_2 | 0:140.12.0-1.el10_2 | |
rpm rhel6 | - | - | |
rpm rhel8 | <0:140.12.0-1.el8_10 | 0:140.12.0-1.el8_10 | |
rpm rhel9 | <0:140.12.0-1.el9_8 | 0:140.12.0-1.el9_8 | |
rpm rhel10 | - | - | |
rpm rhel10 | <0:140.12.0-1.el10_2 | 0:140.12.0-1.el10_2 | |
rpm rhel6 | - | - |
1-10 of 27
10
Does your application use this vulnerable software?
During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.