CVE-2017-7826: Buffer Overflow
Last updated 25 August 2025
Other sources
Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5.
— Launchpad
Mozilla developers and community members Christian Holler, David Keeler, Jon Coppeard, Julien Cristau, Jan de Mooij, Jason Kratzer, Philipp, Nicholas Nethercote, Oriol Brufau, André Bargull, Bob Clary, Jet Villegas, Randell Jesup, Tyson Smith, Gary Kwong, and Ryan VanderMeulen reported memory safety bugs present in Firefox 56 and Firefox ESR 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
— Mozilla
Mozilla developers and community members Christian Holler, David Keeler, Jon Coppeard, Julien Cristau, Jan de Mooij, Jason Kratzer, Philipp, Nicholas Nethercote, Oriol Brufau, André Bargull, Bob Clary, Jet Villegas, Randell Jesup, Tyson Smith, Gary Kwong, and Ryan VanderMeulen reported memory safety bugs present in Firefox 56, Firefox ESR 52.4, and Thunderbird 52.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2017-7826?
CVE-2017-7826 has been classified as having high severity due to potential memory corruption vulnerabilities that may allow arbitrary code execution.
How do I fix CVE-2017-7826?
To fix CVE-2017-7826, upgrade your Firefox or Thunderbird to version 52.5 or higher, or Firefox 57 and above.
Which versions of Firefox are affected by CVE-2017-7826?
Firefox versions prior to 57, specifically 56 and below, are affected by CVE-2017-7826.
Does CVE-2017-7826 affect Thunderbird?
Yes, CVE-2017-7826 affects Thunderbird versions prior to 52.5.
What types of vulnerabilities are associated with CVE-2017-7826?
CVE-2017-7826 is associated with memory safety bugs that can lead to memory corruption and potential exploitation.