| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | ≥ 116.0, < 128.6.0< 115.19.0< 134.0 | 128.6.0115.19.0134.0 |
| thunderbird | ≥ 129.0, < 134.0< 128.6 | 134.0128.6 |
Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Firefox ESR 115.19, Thunderbird 134, and Thunderbird 128.6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free