A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by convincing a user to open an email that is 2GB or larger, triggering a heap buffer overflow. This flaw allows an attacker to corrupt memory, which may cause an application crash, resulting in a Denial of Service (DoS), or potentially lead to arbitrary code execution.
Last checked: 2026-09-30 19:21 UTC
Fix evidence last checked: 2026-10-02 00:19 UTC
Debian 12 (Bookworm)
DLA-4810-1 · Published 2026-10-02
Debian 13 (Trixie)
· Published 2024-12-01