CyberRota Analysis
AI-GeneratedA heap buffer overflow vulnerability exists in certain versions of Thunderbird, which can be exploited by an attacker through a specially crafted email that is 2GB or larger. This could lead to potential remote code execution or system compromise. Organizations using affected versions of Thunderbird should prioritize updating to the patched releases to mitigate the risk.
CVE
CVE-2026-103500
Severity
MEDIUM
CVSS
6.1
EPSS
0.21%
Original NVD Description
An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnerability was fixed in Thunderbird 157, Thunderbird 140.17, and Thunderbird 153.4.
Related CVEs
Other vulnerabilities affecting the same vendor(s)