Thunderbird 144 Security Advisory: Multiple CVEs including UAF, OOB Read/Write, and IPC Leaks

Critical Vulnerability Information Vulnerability Overview Announcement Date: October 14, 2023 Impact: High Product: Thunderbird Fixed Version: Thunderbird 144 Specific Vulnerability Details 1. CVE-2025-11708: Use-after-free in MediaTrackGraphImpl::GetInstance() - Reporter: Ivan Keramidas - Impact: High - Description: A use-after-free vulnerability exists in MediaTrackGraphImpl::GetInstance(). 2. CVE-2025-11709: Out of bounds read/write in a privileged process triggered by WebGL textures - Reporter: Dekel L - Impact: High - Description: Attackers can trigger out-of-bounds read/write operations in a privileged process by manipulating WebGL textures. 3. CVE-2025-11710: Cross-process information leaked due to malicious IPC messages - Reporter: Oder - Impact: High - Description: Malicious IPC messages lead to cross-process information leakage. 4. CVE-2025-11711: Some non-writable Object properties could be modified - Reporter: Entry - Impact: Medium - Description: Certain non-writable JavaScript object properties can be modified. 5. CVE-2025-11712: Sandboxed iframes allowed links to open in external apps (Android only) - Reporter: Axel Chang (@gloson) - Impact: Medium - Description: Sandboxed iframes allow links to open in external applications (Android only). 6. CVE-2025-11713: An OBJECT tag type attribute override browser behavior on web resources without a content-type - Reporter: Masato Kikugawa - Impact: Medium - Description: The type attribute of an OBJECT tag can override browser behavior for web resources lacking a content-type. 7. CVE-2025-11714: Potential user-assisted code execution in "Copy as cURL" command - Reporter: Nathan - Impact: Medium - Description: Potential for user-assisted code execution in the "Copy as cURL" command. 8. CVE-2025-11715: Use-after-free caused by the native messaging web extension API on Windows - Reporter: Filip Slomka - Impact: Medium - Description: A use-after-free vulnerability caused by the native messaging web extension API on Windows. 9. CVE-2025-11716: Memory safety bugs fixed in Firefox ESR 115.2.0, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144 - Reporter: The Mozilla Fuzzing Team - Impact: High - Description: Multiple memory safety bugs fixed in Firefox and Thunderbird. 10. CVE-2025-11721: Memory safety bug fixed in Firefox 144 and Thunderbird 144 - Reporter: None - Impact: High - Description: A memory safety bug fixed in Firefox and Thunderbird.

Goal Reached Thanks to every supporter — we hit 100%!

Thunderbird 144 Security Advisory: Multiple CVEs including UAF, OOB Read/Write, and IPC Leaks

More from this source