CVE-2019-17010: Race Condition
Last updated 25 August 2025
Other sources
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/firefoxto a version that resolves this vulnerability.Fixed in 68.3 - Upgrade
Upgrade
redhat/thunderbirdto a version that resolves this vulnerability.Fixed in 68.3 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 68.3 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 71 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 68.3 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 149.0.2-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.14.0esr-1~deb11u1Fixed in 140.9.1esr-1~deb11u1Fixed in 128.14.0esr-1~deb12u1Fixed in 140.9.1esr-1~deb12u1Fixed in 140.8.0esr-1~deb13u1Fixed in 140.9.1esr-1~deb13u1Fixed in 140.9.1esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:140.9.1esr-1~deb11u1Fixed in 1:140.6.0esr-1~deb12u1Fixed in 1:140.9.1esr-1~deb12u1Fixed in 1:140.8.0esr-1~deb13u1Fixed in 1:140.9.1esr-1~deb13u1Fixed in 1:140.9.0esr-1Fixed in 1:140.9.1esr-1 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 68.3.0-r0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-17010?
CVE-2019-17010 is a vulnerability in Mozilla Thunderbird, Firefox, and Firefox ESR that could lead to a potentially exploitable crash.
How severe is CVE-2019-17010?
CVE-2019-17010 has a severity level of medium.
Which software versions are affected by CVE-2019-17010?
CVE-2019-17010 affects Mozilla Thunderbird up to version 68.3, Mozilla Firefox up to version 71, and Mozilla Firefox ESR up to version 68.3.
How can I fix CVE-2019-17010?
To fix CVE-2019-17010, it is recommended to update Mozilla Thunderbird to version 68.3, Mozilla Firefox to version 71, and Mozilla Firefox ESR to version 68.3.
Where can I find more information about CVE-2019-17010?
You can find more information about CVE-2019-17010 in the following references: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1581084), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2019-38/), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2019-36/).