Threats tagged 'ghsa-3mvr-vp9h-cr29'

A vulnerability in Firefox's XPath parsing component could cause undefined behavior due to missing null checks during attribute access. This flaw may lead to out-of-bounds read access and potential memory corruption. The issue affects Firefox versions prior to 138, Firefox ESR versions prior to 128.10, Thunderbird versions prior to 138, and Thunderbird ESR versions prior to 128.10. Mozilla has addressed this vulnerability in Firefox 138 and Firefox ESR 128.10.