Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Thunderbird and LibreWolf can crash on shutdown
published 4 days ago
Summary
When closing the program, a certain document can cause the software to free memory too early, which may corrupt data and cause the application to crash. This crash could be triggered by an attacker to run malicious code. Update to the latest version of Thunderbird and LibreWolf or apply the vendor’s patch to fix the issue.
What to do
- Update cleanstart thunderbird to version 91.3.2-r0.
- Update cleanstart librewolf to version 93.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | thunderbird |
< 91.3.2-r0 Fix: upgrade to 91.3.2-r0
|
| CleanStart | cleanstart | librewolf |
< 93.0-r0 Fix: upgrade to 93.0-r0
|
Original advisory text
During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash
CVE-2021-38498 affects multiple packages. During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-YF26812 · OSV
Track software like this
Free during beta