Memory safety bugs identified in Mozilla Firefox 141 and Thunderbird 141 can lead to memory corruption that may allow an attacker to execute arbitrary code. The high CVSS score of 9.8 reflects the severity of this vulnerability and indicates that the bugs are exploitable with enough effort.

Affected products include Mozilla Firefox version 141 and Mozilla Thunderbird version 141. The vulnerabilities were fixed in Firefox 142 and Thunderbird 142.

The likely attack vector is user-controlled manipulation of memory within the browser or email client, potentially via malicious webpages or email content. Exploitation would require significant effort, but the low EPSS score of less than 1% indicates that current exploitation attempts are uncommon, and the vulnerability is not listed in the CISA KEV catalog.