Description
Mozilla Firefox and Firefox ESR contain a use-after-free vulnerability in Animation timelines that allows for code execution in the content process.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| firefox | mozilla / firefox | >= 0, < 131.0.2 | affected |
| Firefox | Mozilla / Firefox | >= unspecified, < 131.0.2 | affected |
| firefox_esr | mozilla / firefox_esr | >= 0, < 115.16.1 | affected |
| firefox_esr | mozilla / firefox_esr | >= 0, < 128.3.1 | affected |
| firefox_esr | mozilla / firefox_esr | >= 0, < 115.16.1 | affected |
| firefox_esr | mozilla / firefox_esr | >= 0, < 128.3.1 | affected |
| Firefox ESR | Mozilla / Firefox ESR | >= unspecified, < 115.16.1 | affected |
| Firefox ESR | Mozilla / Firefox ESR | >= unspecified, < 128.3.1 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 128.3.1 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 115.16.0 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 131.0.1 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 128.3.1 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 131.0.1 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 128.3.1 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 115.16.0 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 115.16.0 | affected |
| thunderbird | mozilla / thunderbird | >= 0, < 131.0.1 | affected |
| Thunderbird | Mozilla / Thunderbird | >= unspecified, < 131.0.1 | affected |
| Thunderbird | Mozilla / Thunderbird | >= unspecified, < 128.3.1 | affected |
| Thunderbird | Mozilla / Thunderbird | >= unspecified, < 115.16.0 | affected |