PT-2026-63484 · Mozilla · Thunderbird
CVE-2026-14899
·
Published
2026-07-22
·
Updated
2026-07-22
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Thunderbird