The CVE describes a memory safety bug that was addressed in Thunderbird 152 and Firefox 152, as well as their respective ESR releases. The listed CWE identifiers—CWE-119 and CWE-825—indicate that the flaw involves improper handling of memory bounds and related errors, which typically can lead to memory corruption through invalid read or write operations. The description does not explicitly state the concrete consequences, but the nature of the bug implies that a successful exploitation could compromise the confidentiality, integrity, or availability of the affected process.

All Mozilla Firefox releases older than version 152 and all Firefox ESR releases older than 140.12 are vulnerable. Similarly, all Mozilla Thunderbird releases older than version 152 and all Thunderbird ESR releases older than 140.12 are vulnerable.

The CVSS score of 7.5 classifies this vulnerability as high severity, indicating significant potential impact if exploited. The EPSS score of less than 1 % suggests a low current likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The available data do not specify an attack vector or exploitation pathway; the risk assessment relies solely on the severity rating and low exploitation probability.