CVE-2018-5145: Buffer Overflow
Last updated 25 August 2025
Other sources
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
— Launchpad
Mozilla developers Jet Villegas and Randell Jesup reported memory safety bugs present in Firefox ESR 52.6 and Thunderbird 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
Mozilla developers Jet Villegas and Randell Jesup reported memory safety bugs present in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
— Mozilla
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2018-5145?
CVE-2018-5145 is a vulnerability in Firefox ESR and Thunderbird that allows memory corruption and potential arbitrary code execution.
Which software versions are affected by CVE-2018-5145?
Firefox ESR 52.6 and Thunderbird 52.6 are affected by CVE-2018-5145.
How severe is CVE-2018-5145?
CVE-2018-5145 has a severity value of 9, which is considered critical.
Where can I find more information about CVE-2018-5145?
You can find more information about CVE-2018-5145 on the Mozilla and Red Hat websites.
How can I fix CVE-2018-5145?
To fix CVE-2018-5145, you should update your Firefox ESR or Thunderbird to version 52.7 or higher.