Out of Bounds Read and Write Vulnerability in Mozilla Firefox and Thunderbird

CVE-2025-11709

What is CVE-2025-11709?

A vulnerability exists in Mozilla Firefox and Thunderbird that enables a compromised web process to initiate out-of-bounds reads and writes within a more privileged process. This risk is introduced through manipulated WebGL textures, allowing attackers to bypass security measures. The affected versions include Firefox versions below 144, specific Firefox ESR versions below 115.29 and 140.4, as well as Thunderbird versions below 144 and 140.4. Users should ensure they are running the latest versions to mitigate this potential threat.

References