Description
A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking sensitive data. This vulnerability affects Thunderbird < 149 and Thunderbird < 140.9.
INFO
Published Date :
2026-03-24T20:27:15.198Z
Last Modified :
2026-03-24T20:27:15.198Z
Source :
mozilla
AFFECTED PRODUCTS
The following products are affected by CVE-2026-4371 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-4371.
