Firetruck

CVE-2019-17026

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
FirefoxMozilla / Firefox>= unspecified, < 72.0.1affected
Firefox ESRMozilla / Firefox ESR>= unspecified, < 68.4.1affected
ThunderbirdMozilla / Thunderbird>= unspecified, < 68.4.1affected