Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 91.9, Firefox ESR < 91.9, and Firefox < 100.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefoxUpgrade thunderbird | May 6, 2022 | May 4, 2022 |
| Alpine Linux | — | Upgrade librewolfUpgrade firefox-esrUpgrade thunderbirdUpgrade firefox | Aug 22, 2024 | Dec 22, 2022 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade thunderbird-debuginfo | Jul 9, 2024 | Dec 22, 2022 |
| Centos_linux | — | Upgrade firefox-debuginfoUpgrade firefox-debugsourceUpgrade thunderbird-debuginfoUpgrade thunderbird-debugsourceUpgrade firefoxUpgrade thunderbird | May 5, 2022 | May 4, 2022 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | May 6, 2022 | May 6, 2022 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox-bin. | Aug 11, 2022 | Aug 10, 2022 |
| Mfsa2022 16 | — | Upgrade to Mozilla Firefox version 100.0Upgrade to the latest version of Mozilla Firefox | May 4, 2022 | May 3, 2022 |
| Mfsa2022 17 | — | Upgrade to Mozilla Firefox ESR version 91.9Upgrade to the latest version of Mozilla Firefox | May 4, 2022 | May 3, 2022 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 91.9Upgrade to the latest version of Mozilla Thunderbird | May 6, 2022 | May 3, 2022 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | May 5, 2022 | May 3, 2022 |
| Redhat_linux | — | Upgrade firefox-debuginfoUpgrade firefoxUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade thunderbirdNo solution existsUpgrade firefox-debugsource | May 5, 2022 | May 4, 2022 |
| Rocky_linux | — | Upgrade thunderbird-debugsourceUpgrade thunderbirdUpgrade firefox-debugsourceUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade firefox-debuginfo | Mar 5, 2024 | Dec 22, 2022 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefoxUpgrade mozillafirefox-branding-upstream | Oct 26, 2022 | May 17, 2022 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | May 12, 2022 | May 4, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub