CVE-2018-5125: Buffer Overflow
Last updated 25 August 2025
Other sources
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
— Launchpad
Mozilla developers and community members Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, and Philipp reported memory safety bugs present in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
— Mozilla
Mozilla developers and community members Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, and Philipp reported memory safety bugs present in Firefox 58, Firefox ESR 52.6, and Thunderbird 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
Mozilla developers and community members reported memory safety bugs present in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5125
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-5125?
CVE-2018-5125 has been rated as potentially critical due to evidence of memory corruption allowing arbitrary code execution.
How do I fix CVE-2018-5125?
To fix CVE-2018-5125, update your software to Thunderbird version 52.7 or later, Firefox ESR version 52.7 or later, or Firefox version 59 or later.
Which versions are affected by CVE-2018-5125?
CVE-2018-5125 affects Thunderbird versions prior to 52.7 and Firefox ESR versions prior to 52.7, among others.
Is CVE-2018-5125 exploitable?
Yes, CVE-2018-5125 is presumed to be exploitable with sufficient effort due to memory safety bugs.
What types of platforms are impacted by CVE-2018-5125?
CVE-2018-5125 impacts various platforms including Debian, Ubuntu, and Red Hat Enterprise Linux versions that run the affected software.