An out-of-bounds read occurs when applying style rules to pseudo-elements such as ::first-line using cached style data. This vulnerability affects Thunderbird < 52.3 Firefox ESR < 52.3 and Firefox < 55.