Memory Safety Vulnerabilities in Firefox and Thunderbird by Mozilla
CVE-2025-1937
Currently unrated
Summary
This vulnerability encompasses critical memory safety flaws found in specific versions of Firefox and Thunderbird. These flaws involve memory corruption issues that, if successfully exploited, could potentially allow an attacker to execute arbitrary code. These security defects affect main releases and extended support versions of Firefox and Thunderbird, necessitating prompt updates to the latest versions to mitigate risks.
Affected Version(s)
Firefox < 136
Firefox ESR < 115.21
Firefox ESR < 128.8
References
Timeline
Vulnerability published
Vulnerability Reserved
Credit
the Mozilla Fuzzing Team, Andrew McCreight