PT-2026-27517 · Mozilla+1 · Thunderbird+1
Rintaro Kobayashi
·
Publicado
2026-03-24
·
Atualizado
2026-04-17
·
CVE-2026-4371
CVSS v3.1
7.4
Alta
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 149
Thunderbird versions prior to 140.9
Description
A specially crafted email could contain malformed strings with negative lengths, leading to a memory read outside of the intended buffer. Successful exploitation of this issue, potentially through a compromised mail server or connection, could cause Thunderbird to crash or leak sensitive data.
Recommendations
Update Thunderbird to version 149 or later.
Update Thunderbird to version 140.9 or later.
Correção
Buffer Over-read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Rocky Linux
Thunderbird