CVE-2018-12405: Buffer Overflow
Last updated 25 August 2025
Other sources
Mozilla developers and community members Christian Holler, Diego Calleja, Andrew McCreight, Jon Coppeard, Jed Davis, Natalia Csoregi, Nicolas B. Pierron, and Tyson Smith reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
— Mozilla
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-30/#CVE-2018-12405
— Red Hat
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
— Launchpad
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12405?
CVE-2018-12405 has been classified as a medium severity vulnerability due to its potential to cause memory safety issues that could be exploited.
How do I fix CVE-2018-12405?
To fix CVE-2018-12405, upgrade to the latest versions of Firefox, Firefox ESR, or Thunderbird as specified in the affected software section.
Which versions are affected by CVE-2018-12405?
CVE-2018-12405 affects Firefox versions up to 64, Firefox ESR versions up to 60.4, and Thunderbird versions up to 60.4.
What types of bugs does CVE-2018-12405 include?
CVE-2018-12405 includes memory safety bugs that could potentially be exploited, resulting in crashes or arbitrary code execution.
Is CVE-2018-12405 specific to any operating systems?
CVE-2018-12405 is not specific to any operating systems but rather affects multiple platforms running the affected versions of Firefox and Thunderbird.