The issue is related to memory safety bugs that have been identified in Firefox, Firefox ESR, and Thunderbird. Some of these bugs showed evidence of memory corruption, and it is presumed that with enough effort, some of these could have been exploited to run arbitrary code. The vulnerability affects versions prior to the specified fixed versions.