Simon Giesecke

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 96 Firefox ESR versions prior to 91.5 Thunderbird versions prior to 91.5 **Description** The issue is related to memory safety bugs present in the software, which can lead to memory corruption. With sufficient effort, these bugs could be exploited to run arbitrary code. The vulnerability is associated with incorrect limitation of operations within the bounds of a memory buffer when processing HTML content. This could allow a remote attacker to cause memory damage and execute arbitrary code on the target system. **Recommendations** For Firefox versions prior to 96, update to version 96 or later. For Firefox ESR versions prior to 91.5, update to version 91.5 or later. For Thunderbird versions prior to 91.5, update to version 91.5 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 91 Firefox ESR versions prior to 78.13 Thunderbird versions prior to 78.13 **Description** The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with sufficient effort. It is also associated with a boundary error when processing HTML content, allowing a remote attacker to execute arbitrary code and cause memory damage. **Recommendations** For Firefox versions prior to 91, update to version 91 or later. For Firefox ESR versions prior to 78.13, update to version 78.13 or later. For Thunderbird versions prior to 78.13, update to version 78.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 82 Firefox ESR versions prior to 78.4 Thunderbird versions prior to 78.4 **Description** The issue is related to a buffer overflow due to insufficient input validation, potentially allowing a remote attacker to execute arbitrary code using a specially crafted web page. Memory safety bugs have been reported in Firefox and Firefox ESR, showing evidence of memory corruption, which could be exploited to run arbitrary code with sufficient effort. **Recommendations** For Firefox versions prior to 82, update to version 82 or later to resolve the issue. For Firefox ESR versions prior to 78.4, update to version 78.4 or later to resolve the issue. For Thunderbird versions prior to 78.4, update to version 78.4 or later to resolve the issue.