Use-After-Free Vulnerability in Mozilla Firefox and Thunderbird Products
CVE-2025-11708
Currently unrated
Key Information:
- Vendor
Mozilla
- Vendor
- CVE Published:
- 14 October 2025
What is CVE-2025-11708?
A use-after-free vulnerability exists in the MediaTrackGraphImpl::GetInstance() function, which can lead to potential security risks in affected versions of Mozilla Firefox and Thunderbird. This flaw can be exploited by attackers to potentially execute arbitrary code or cause application crashes, compromising user data and security. The vulnerability affects specific versions of Firefox and Thunderbird, emphasizing the importance of upgrading to secure versions promptly.
Affected Version(s)
Firefox < 144
Firefox ESR < 140.4
Thunderbird < 144