CLSA-2026-1783601793
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783601793.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1783601793
- Upstream
CVE (3)
- CVE-2026-2759
- CVE-2026-2778
- CVE-2026-4689
- Published
- 2026-07-09T12:56:51Z
- Modified
- 2026-10-26T09:30:02Z
- Summary
- thunderbird: Fix of 3 CVEs
- Details
-
- CVE-2026-2759: out-of-bounds read in AVIF ByteStream reader; validate offset/size via CheckedInt<size_t> before pointer arithmetic and swap the sign-mismatched >= for > in GetContiguousAccess (Bug 2010933, upstream facd3303abe7)
- CVE-2026-2778: out-of-bounds heap read in StructuredCloneBlob IPC deserialization; route BlobImpls copy through Span::Subspan so the bounds check triggers a hard abort instead of leaking parent-process memory (Bug 2016358, upstream 1479f78b642c)
- CVE-2026-4689: integer overflow / sandbox escape in SlicedInputStream IPC deserialization; validate start+length via CheckedUint64 and reject when curPos exceeds the computed end (Bug 2016374, upstream 14db1934383f)
- References