CVE-2018-12389: Buffer Overflow
Last updated 25 August 2025
Other sources
Mozilla developers and community members Daniel Veditz and Philipp reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
— Mozilla
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/#CVE-2018-12389
— Red Hat
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.
— Launchpad
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2018-12389?
CVE-2018-12389 is a memory safety bug present in Firefox ESR 60.2 that could be exploited to run arbitrary code.
Which versions of Firefox ESR are affected by CVE-2018-12389?
Firefox ESR versions prior to 60.3 are affected by CVE-2018-12389.
What is the severity of CVE-2018-12389?
CVE-2018-12389 has a severity rating of 8.8 (high).
How can I fix CVE-2018-12389?
To fix CVE-2018-12389, update Firefox ESR to version 60.3 or later.
Where can I find more information about CVE-2018-12389?
You can find more information about CVE-2018-12389 at the following references: [link1], [link2], [link3].