Memory Safety Vulnerabilities in Mozilla Firefox and Thunderbird
CVE-2025-11714

Currently unrated

Key Information:

Vendor

Mozilla

Vendor
CVE Published:
14 October 2025

What is CVE-2025-11714?

Multiple memory safety bugs have been identified in various versions of Mozilla Firefox and Thunderbird. Affected versions include Firefox ESR 115.28, Firefox ESR 140.3, and their corresponding Thunderbird versions. These bugs have shown signs of memory corruption that could potentially be exploited to execute arbitrary code. Users are encouraged to update to newer software versions to mitigate these vulnerabilities, including Firefox ESR 115.29, Firefox ESR 140.4, and Thunderbird 140.4.

Affected Version(s)

Firefox < 144

Firefox ESR < 115.29

Firefox ESR < 140.4

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

The Mozilla Fuzzing Team
.
CVE-2025-11714 : Memory Safety Vulnerabilities in Mozilla Firefox and Thunderbird