Firefox incorrectly treated an inline list-item element as a block element resulting in an out of bounds read or memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13 Thunderbird < 91 Firefox ESR < 78.13 and Firefox < 91.