This vulnerability is a memory safety bug classified under CWE-119, present in Firefox ESR 128.9 and Thunderbird 128.9. It shows evidence of memory corruption, which could be leveraged by an attacker to run arbitrary code with sufficient effort. The CVSS v3.1 base score is 8.1, indicating high impact across confidentiality, integrity, and availability. Mozilla released official fixes in Firefox ESR 128.10 and Thunderbird 128.10 to address this issue. The vendor advisories confirm the fix and provide no indication of active exploitation.

Successful exploitation of this memory corruption vulnerability could allow an attacker to execute arbitrary code, potentially compromising the confidentiality, integrity, and availability of the affected systems. However, no known exploits have been reported in the wild. The vulnerability affects both Firefox ESR and Thunderbird versions 128.9 prior to the patched releases.

Mozilla has released official fixes for this vulnerability in Firefox ESR 128.10 and Thunderbird 128.10. Users and administrators should update to these versions or later to remediate the issue. Since the vulnerability is fixed in these releases, no additional mitigation steps are required beyond applying the official patches.