CVE-2026-110247 is a high-severity vulnerability in Thunderbird's libmime library where size arithmetic was performed using 32-bit types without proper overflow checks. This flaw could cause heap corruption by allowing a buffer to be reallocated smaller than required, leading to attacker-controlled data overwriting adjacent heap allocations. The issue was fixed in Thunderbird version 158.