An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvorbis | Jul 31, 2018 | Jun 11, 2018 |
| Amazon Linux Ami 2 | — | Upgrade libvorbisUpgrade libvorbis-debuginfoUpgrade libvorbis-develUpgrade libvorbis-devel-docs | Apr 27, 2020 | Jun 11, 2018 |
| Amazon_linux | — | Upgrade libvorbis | Mar 2, 2020 | Mar 29, 2018 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2018 |
| Centos_linux | — | Upgrade libvorbis-devel-docsUpgrade libvorbisUpgrade thunderbird-debuginfoUpgrade libvorbis-develUpgrade firefox-debuginfoUpgrade firefoxUpgrade libvorbis-debuginfoUpgrade thunderbird | Jun 1, 2018 | Mar 29, 2018 |
| Debian | — | Upgrade libvorbisUpgrade firefox-esrUpgrade thunderbird | Feb 19, 2019 | Jun 11, 2018 |
| Freebsd | — | Upgrade firefox-esrUpgrade linux-thunderbirdUpgrade libxulUpgrade linux-seamonkeyUpgrade firefoxUpgrade thunderbirdUpgrade libtremorUpgrade libvorbisUpgrade seamonkeyUpgrade waterfoxUpgrade linux-firefox | Dec 10, 2025 | Mar 16, 2018 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird. | Nov 26, 2018 | Jun 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade firefox | May 3, 2018 | Mar 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade firefox | May 3, 2018 | Mar 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade firefox | Jun 28, 2018 | Jun 11, 2018 |
| Mfsa2018 08 | — | Upgrade to Mozilla Firefox version 59.0.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 52.7.2 | Mar 19, 2018 | Mar 16, 2018 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 52.7 | Mar 26, 2018 | Mar 23, 2018 |
| Oracle Solaris | — | Upgrade web/data/firefox-bookmarks to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3Upgrade web/browser/firefox/plugin/firefox-java to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3Upgrade mail/thunderbird to version 52.7.0-0.175.3.31.0.4.0 on Solaris 11.3Upgrade codec/ogg-vorbis to version 2.30.0-0.175.3.35.0.3.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 52.7.0-0.175.3.31.0.4.0 on Solaris 11.3Upgrade web/browser/firefox to version 52.7.3-0.175.3.31.0.4.0 on Solaris 11.3 | Apr 18, 2018 | Apr 18, 2018 |
| Oracle_linux | — | Upgrade libvorbisUpgrade thunderbirdUpgrade libvorbis-devel-docsUpgrade firefoxUpgrade libvorbis-devel | Mar 2, 2020 | Mar 16, 2018 |
| Redhat_linux | — | Upgrade libvorbis-devel-docsUpgrade firefoxUpgrade thunderbirdUpgrade firefox-debuginfoUpgrade libvorbisNo solution existsUpgrade thunderbird-debuginfoUpgrade libvorbis-develUpgrade libvorbis-debuginfo | May 1, 2018 | Mar 29, 2018 |
| Suse | — | Upgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-commonUpgrade libvorbisenc2-32bitUpgrade libvorbis0Upgrade MozillaThunderbird-buildsymbolsUpgrade MozillaThunderbird-translations-otherUpgrade libvorbis-docUpgrade libvorbis-x86Upgrade libvorbisenc2Upgrade libvorbis-32bitUpgrade libvorbis-develUpgrade libvorbisUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-develUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translationsUpgrade libvorbisfile3Upgrade libvorbis0-32bitUpgrade libvorbisfile3-32bit | Jun 21, 2018 | Mar 23, 2018 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade libvorbis0a | Apr 26, 2018 | Mar 29, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub