CVE-2026-14899
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Jul 22, 2026
CISA due date
—
The record
The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentially crashing Thunderbird. This vulnerability was fixed in Thunderbird 153 and Thunderbird 140.13.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-116735 libpff through 20260926 contains an off-by-one bounds check in… CWE-193
- CVE-2026-115916 vLLM is an inference and serving engine for large language models. CWE-193
- CVE-2026-114460 A flaw was found in mod_qos. CWE-193
- CVE-2026-12727 IBM MQ could allow an authenticated attacker to cause potential process instability due… CWE-193
- CVE-2026-42618 In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in… CWE-193
- CVE-2026-106584 In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times… CWE-193
- CVE-2026-90781 alsa-lib through 1.2.16.1 contains a stack buffer overflow in the… CWE-193
- CVE-2026-81396 Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to… CWE-193