CVE-2019-9792

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 66 Firefox ESR versions prior to 60.6 Thunderbird versions prior to 60.6

Description The IonMonkey just-in-time (JIT) compiler can leak an internal JS OPTIMIZED OUT magic value to the running script during a bailout, which can be used by JavaScript to achieve memory corruption, resulting in a potentially exploitable crash. The vulnerability is related to a buffer overflow and memory corruption issue.

Recommendations For Firefox versions prior to 66, update to version 66 or later. For Firefox ESR versions prior to 60.6, update to version 60.6 or later. For Thunderbird versions prior to 60.6, update to version 60.6 or later.