CVE-2026-103500 — Heap buffer overflow opening large email
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, …
Published: 2026-09-30 · CVSS: 6.3 · CVSS 3.1
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7