CVE-2018-5146

CVE-2018-5146 is a high-severity out-of-bounds memory write vulnerability affecting Firefox versions prior to 59.0.1, Firefox ESR prior to 52.7.2, and Thunderbird prior to 52.7, triggered by processing malicious Vorbis audio data. With a CVSS score of 8.8, it poses a significant risk, allowing for potential remote code execution and complete compromise of confidentiality, integrity, and availability, requiring user interaction (e.g., visiting a malicious website). Despite its high severity and EPSS score, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.