CVE-2026-84639

Description

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

References

https://www.mozilla.org/security/advisories/mfsa2026-88/

https://www.mozilla.org/security/advisories/mfsa2026-87/

https://www.mozilla.org/security/advisories/mfsa2026-86/

https://bugzilla.mozilla.org/show_bug.cgi?id=2061087

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3