Memory Safety Vulnerabilities in Firefox and Thunderbird Products by Mozilla
CVE-2025-5268

8.1HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
27 May 2025

What is CVE-2025-5268?

Memory safety bugs were found in specific versions of Firefox and Thunderbird, indicating potential memory corruption issues. With sufficient effort, these vulnerabilities could be exploited to execute arbitrary code. This affects users on Firefox versions prior to 139 and Firefox ESR versions prior to 128.11. Mozilla has addressed these vulnerabilities in the latest releases, providing critical updates for enhanced security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Firefox < 139

Firefox ESR < 128.11

Thunderbird < 139

References

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1950136%2...
https://www.mozilla.org/security/advisories/mfsa2025-42/
https://www.mozilla.org/security/advisories/mfsa2025-44/

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

the Mozilla Fuzzing Team, Masayuki Nakano
JSON
.