VDB
RHSA-2026:49621
RHSA-2026:49621
PUBLISHED
CVSS 3.4000000953674316 LOW
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird.
Risk Scores
CVSS 3.1
3.4000000953674316
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | thunderbird-debugsource-0:140.13.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-debugsource-0:140.13.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-debugsource-0:140.13.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-0:140.13.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-debugsource-0:140.13.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-debuginfo-0:140.13.0-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-debuginfo-0:140.13.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-debuginfo-0:140.13.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-debuginfo-0:140.13.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-0:140.13.0-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-0:140.13.0-1.el10_2.src as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-0:140.13.0-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
| Red Hat | thunderbird-0:140.13.0-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:140.13.0-1.el10_2 |
Timeline
- Aug 3, 2026 CVE Published
- Aug 12, 2026 CVE Updated
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Distribution Patch
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
- Aug 12, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:49621 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2499973 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2499974 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503415 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503416 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503420 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503423 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503425 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503430 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503432 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503434 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503439 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503440 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503444 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503451 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503454 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503456 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503463 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2503472 issue
…and 180 more