An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvorbis | Jul 31, 2018 | Jun 11, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libvorbisUpgrade libvorbis-develUpgrade libvorbis-debuginfoUpgrade libvorbis-devel-docs | Apr 27, 2020 | Jun 11, 2018 |
| Amazon_linux | — | Upgrade libvorbis | Mar 2, 2020 | Mar 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Centos_linux | — | Upgrade thunderbird-debuginfoUpgrade libvorbis-develUpgrade libvorbisUpgrade libvorbis-devel-docsUpgrade firefox-debuginfoUpgrade firefoxUpgrade thunderbirdUpgrade libvorbis-debuginfo | Jun 1, 2018 | Mar 29, 2018 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esrUpgrade libvorbis | Feb 19, 2019 | Jun 11, 2018 |
| Freebsd | — | Upgrade waterfoxUpgrade linux-firefoxUpgrade seamonkeyUpgrade libvorbisUpgrade thunderbirdUpgrade libtremorUpgrade firefoxUpgrade libxulUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade linux-thunderbird | Dec 10, 2025 | Mar 16, 2018 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Nov 26, 2018 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade firefox | May 3, 2018 | Mar 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade firefox | May 3, 2018 | Mar 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade firefox | Jun 28, 2018 | Jun 11, 2018 |
| Mfsa2018 08 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 52.7.2Upgrade to Mozilla Firefox version 59.0.1 | Mar 19, 2018 | Mar 16, 2018 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 52.7Upgrade to the latest version of Mozilla Thunderbird | Mar 26, 2018 | Mar 23, 2018 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 52.7.0-0.175.3.31.0.4.0 on Solaris 11.3Upgrade web/browser/firefox to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3Upgrade codec/ogg-vorbis to version 2.30.0-0.175.3.35.0.3.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 52.7.0-0.175.3.31.0.4.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3Upgrade web/browser/firefox/plugin/firefox-java to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3 | Apr 18, 2018 | Apr 18, 2018 |
| Oracle_linux | — | Upgrade libvorbis-devel-docsUpgrade thunderbirdUpgrade libvorbis-develUpgrade firefoxUpgrade libvorbis | Mar 2, 2020 | Mar 16, 2018 |
| Redhat_linux | — | No solution existsUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade libvorbis-develUpgrade libvorbis-debuginfoUpgrade libvorbisUpgrade thunderbirdUpgrade firefoxUpgrade libvorbis-devel-docs | May 1, 2018 | Mar 29, 2018 |
| Suse | — | Upgrade MozillaThunderbird-develUpgrade MozillaFirefox-translationsUpgrade MozillaThunderbird-translations-commonUpgrade libvorbisfile3Upgrade MozillaFirefoxUpgrade libvorbis0Upgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade libvorbisUpgrade libvorbis-docUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-buildsymbolsUpgrade libvorbis-x86Upgrade libvorbis0-32bitUpgrade libvorbisfile3-32bit | Jun 21, 2018 | Mar 23, 2018 |
| Ubuntu | — | Upgrade libvorbis0aUpgrade firefoxUpgrade thunderbird | Apr 26, 2018 | Mar 29, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub