If an attacker could find a way to trigger a particular code path in SafeRefPtr, it could have triggered a crash or potentially be leveraged to achieve code execution. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox | - | 124.0 |
| mozilla / firefox | - | 115.9 |
| mozilla / thunderbird | - | 115.9 |