| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 128.7.0< 133.0 | 128.7.0133.0 |
| thunderbird | ≥ 129.0, < 133.0< 128.7.0 | 133.0128.7.0 |
A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially leading to memory corruption. This vulnerability affects Firefox < 133, Thunderbird < 133, Firefox ESR < 128.7, and Thunderbird < 128.7.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free