Critical severity9.8NVD Advisory· Published Jun 11, 2018· Updated Jun 17, 2026
CVE-2018-5145
CVE-2018-5145
Description
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21<52.7+ 1 more
- (no CPE)range: <52.7
- (no CPE)range: unspecified
<52.7+ 1 more
- (no CPE)range: <52.7
- (no CPE)range: unspecified
- osv-coords17 versionspkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Package%20Hub%2012
< 91.1.1-1.1+ 16 more
- (no CPE)range: < 91.1.1-1.1
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7.3esr-72.27.2
- (no CPE)range: < 52.7.3esr-72.27.2
- (no CPE)range: < 52.7.3esr-72.27.2
- (no CPE)range: < 52.7.3esr-72.27.2
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7.3esr-72.27.2
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7.3esr-72.27.2
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7.3esr-109.25.1
- (no CPE)range: < 52.7-57.1
Patches
Vulnerability mechanics
References
15- www.securityfocus.com/bid/103384nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040514nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2018:0526nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2018:0527nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2018:0647nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2018:0648nvdThird Party Advisory
- bugzilla.mozilla.org/buglist.cginvdIssue TrackingPermissions RequiredThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/03/msg00010.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2018/03/msg00029.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/201811-13nvdThird Party Advisory
- usn.ubuntu.com/3545-1/nvdThird Party Advisory
- www.debian.org/security/2018/dsa-4139nvdThird Party Advisory
- www.debian.org/security/2018/dsa-4155nvdThird Party Advisory
- www.mozilla.org/security/advisories/mfsa2018-07/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2018-09/nvdVendor Advisory
News mentions
0No linked articles in our index yet.