CVE-2023-1945

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 102.10 Firefox ESR versions prior to 102.10

Description The issue is related to the Safe Browsing API, where unexpected data could lead to memory corruption and a potentially exploitable crash. This could allow a remote attacker to execute arbitrary code in the target system and cause memory damage using a specially crafted website. The vulnerability is associated with a buffer overflow operation in memory.

Recommendations For Thunderbird versions prior to 102.10, update to version 102.10 or later. For Firefox ESR versions prior to 102.10, update to version 102.10 or later. As a temporary workaround, consider restricting access to the Safe Browsing API until a patch is available.