A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.
[
{
"cpes": [
"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
],
"vendor": "mozilla",
"product": "firefox",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "131",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
],
"vendor": "mozilla",
"product": "firefox_esr",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "128.3",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"cpes": [
"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
],
"vendor": "mozilla",
"product": "thunderbird",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "128.3",
"versionType": "custom"
},
{
"status": "affected",
"version": "0",
"lessThan": "131",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]