CVE-2017-7805

CVE-2017-7805 is a use-after-free vulnerability in Mozilla Firefox, Firefox ESR, and Thunderbird, occurring during TLS 1.2 handshake exchanges. When the handshake transcript exceeds buffer space, a new buffer is allocated, but a pointer to the old, freed buffer remains, leading to a potentially exploitable crash. This vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity, requiring no user interaction, and resulting in high availability impact. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.