The CVE description indicates a memory safety bug that was addressed in Thunderbird 152, with a corresponding fix also applied to Firefox 152. Specific technical details are not provided, but the stated impact aligns with typical memory safety issues such as buffer overflows or underflows, consistent with the CWE‑119 and CWE‑131 classifications. The absence of detailed exploitation data suggests that the bug may primarily affect application stability, potentially leading to crashes or other integrity problems.

Mozilla Firefox and Mozilla Thunderbird are affected. Versions prior to 152 contain the flaw. The issue was fixed in Firefox 152 and Thunderbird 152, so any installation running an earlier release is potentially impacted.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is less than 1%, suggesting a low probability of exploitation in the wild. The vulnerability is not listed in CISA KEV. The likely attack vector is local; an attacker would need to run code within the user’s context to trigger the memory error. No public exploit has been reported, but the moderate CVSS combined with low EPSS still warrants patching to prevent potential crashes or malicious execution.