CVE-2025-0247

Critical CVSS: 9.8

Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134 and Thunderbird < 134.

Vendor

Mozilla

Product

Firefox

CWE

CWE-787

Yayın Tarihi

2025-01-07 16:15:39

Güncelleme

2025-04-03 16:25:30

Source Identifier

security@mozilla.org

KEV Date Added

Kategoriler

CWE-787 Firefox CRITICAL Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1835193%2C1910021%2C1919803%2C1931576%2C1931948%2C1932173 https://www.mozilla.org/security/advisories/mfsa2025-01/ https://www.mozilla.org/security/advisories/mfsa2025-04/

Benzer Kayıtlar

Medium

CVE-2026-3889

Spoofing issue in Thunderbird. This vulnerability affects Thunderbird < 149 and Thunderbird < 140.9.

High

CVE-2026-4371

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside th…

High

CVE-2026-4722

Privilege escalation in the IPC component. This vulnerability affects Firefox < 149 and Thunderbird < 149.

Critical

CVE-2026-4723

Use-after-free in the JavaScript Engine component. This vulnerability affects Firefox < 149 and Thunderbird < 149.

Critical

CVE-2026-4724

Undefined behavior in the Audio/Video component. This vulnerability affects Firefox < 149 and Thunderbird < 149.

Critical

CVE-2026-4725

Sandbox escape due to use-after-free in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149 and T…