An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvorbis | Jul 31, 2018 | Jun 11, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libvorbis-debuginfoUpgrade libvorbis-devel-docsUpgrade libvorbis-develUpgrade libvorbis | Apr 27, 2020 | Jun 11, 2018 |
| Amazon_linux | — | Upgrade libvorbis | Mar 2, 2020 | Mar 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Centos_linux | — | Upgrade libvorbis-debuginfoUpgrade firefoxUpgrade thunderbirdUpgrade libvorbis-devel-docsUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade libvorbisUpgrade libvorbis-devel | Jun 1, 2018 | Mar 29, 2018 |
| Debian | — | Upgrade thunderbirdUpgrade libvorbisUpgrade firefox-esr | Feb 19, 2019 | Jun 11, 2018 |
| Freebsd | — | Upgrade libvorbisUpgrade waterfoxUpgrade linux-firefoxUpgrade seamonkeyUpgrade firefoxUpgrade linux-thunderbirdUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade libtremorUpgrade thunderbirdUpgrade libxul | Dec 10, 2025 | Mar 16, 2018 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird. | Nov 26, 2018 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade firefox | May 3, 2018 | Mar 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade firefox | May 3, 2018 | Mar 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade firefox | Jun 28, 2018 | Jun 11, 2018 |
| Mfsa2018 08 | — | Upgrade to Mozilla Firefox version 59.0.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 52.7.2 | Mar 19, 2018 | Mar 16, 2018 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 52.7 | Mar 26, 2018 | Mar 23, 2018 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 52.7.0-0.175.3.31.0.4.0 on Solaris 11.3Upgrade web/browser/firefox to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 52.7.0-0.175.3.31.0.4.0 on Solaris 11.3Upgrade codec/ogg-vorbis to version 2.30.0-0.175.3.35.0.3.0 on Solaris 11.3Upgrade web/browser/firefox/plugin/firefox-java to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3 | Apr 18, 2018 | Apr 18, 2018 |
| Oracle_linux | — | Upgrade libvorbisUpgrade firefoxUpgrade libvorbis-devel-docsUpgrade libvorbis-develUpgrade thunderbird | Mar 2, 2020 | Mar 16, 2018 |
| Redhat_linux | — | No solution existsUpgrade thunderbird-debuginfoUpgrade libvorbisUpgrade libvorbis-develUpgrade libvorbis-debuginfoUpgrade firefox-debuginfoUpgrade firefoxUpgrade thunderbirdUpgrade libvorbis-devel-docs | May 1, 2018 | Mar 29, 2018 |
| Suse | — | Upgrade MozillaThunderbird-translations-commonUpgrade libvorbisfile3Upgrade MozillaFirefoxUpgrade MozillaThunderbird-develUpgrade libvorbis0-32bitUpgrade libvorbis-develUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-commonUpgrade libvorbis-docUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbirdUpgrade libvorbis-32bitUpgrade libvorbis0Upgrade MozillaFirefox-translations-otherUpgrade libvorbisfile3-32bitUpgrade MozillaFirefox-translations | Jun 21, 2018 | Mar 23, 2018 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade libvorbis0a | Apr 26, 2018 | Mar 29, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub