CVE-2025-11708 | Mozilla Thunderbird up to 143 GetInstance use after free

October 14, 2025 Yanac

A vulnerability marked as critical has been reported in Mozilla Thunderbird up to 143. This issue affects the function MediaTrackGraphImpl::GetInstance. This manipulation causes use after free.

This vulnerability is registered as CVE-2025-11708. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More