This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-12318 →

DEBIAN-CVE-2026-12318

Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Debian:12 nss

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.87.1-1+deb12u3"}]}]

Debian:13 nss

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.110-1+deb13u3"}]}]

Debian:14 nss

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.124-1"}]}]