CVE-2018-18512

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.5

Description A use-after-free issue can occur in Thunderbird when playing a sound notification. The memory containing the sound data is freed immediately, even though the sound is still being played asynchronously, which can lead to a potentially exploitable crash.

Recommendations For versions prior to 60.5, update to version 60.5 or later to resolve the issue.