CVE-2018-5129

CVE-2018-5129 is a critical vulnerability affecting Mozilla Firefox, Firefox ESR, and Thunderbird versions prior to 59 and 52.7 respectively. It stems from insufficient parameter validation in Inter-Process Communication (IPC) messages, leading to a potential out-of-bounds write. This flaw could enable a sandbox escape via memory corruption in the parent process, posing a significant security risk. The vulnerability carries a CVSS v3 score of 8.6 (HIGH), indicating a severe threat. Its attack vector is network-based with low attack complexity, requiring no user interaction, and could lead to high integrity impact. While no active exploitation has been observed, nor are there public exploits or Metasploit modules available, the potential for a sandbox escape makes it a serious concern. Despite its severity, there is no evidence of active exploitation, and it is not listed in CISA's KEV catalog. Community discussion and media coverage for this CVE are minimal, which is typical for the vast majority of vulnerabilities.