UBUNTU-CVE-2026-124945: Medium severity ubuntu/mozjs52 vulnerability

Published Nov 12, 2026

Updated

Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.

Affected Software

10 affected components

ubuntu/mozjs52*

ubuntu/mozjs38*

ubuntu/mozjs68*

ubuntu/mozjs52*

ubuntu/mozjs102*

ubuntu/mozjs78*

ubuntu/mozjs91*

ubuntu/thunderbird*

ubuntu/mozjs102*

ubuntu/mozjs115*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox and Thunderbird to a version that resolves this vulnerability.
Fixed in 160

Event History

Nov 12, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which Mozilla applications are confirmed to contain the fix?

The vulnerability was fixed in Firefox 160 and Thunderbird 160. The listed Ubuntu packages also include multiple mozjs versions and Thunderbird, but no package-specific fixed versions are provided.

What component is affected?

The issue is in the Layout: Text and Fonts component and involves an invalid pointer.