Use-After-Free Vulnerability in Firefox Affects Mozilla Products
CVE-2025-6424

Currently unrated

Key Information:

Vendor

Mozilla

Vendor
CVE Published:
24 June 2025

What is CVE-2025-6424?

A use-after-free vulnerability has been identified in the FontFaceSet component of the Firefox web browser, which may result in a crash that could potentially be exploited. This flaw affects multiple versions of Firefox, including those before version 140, as well as certain extended support releases. Users of the affected versions should be aware of the potential risks and update to patched releases to ensure their security.

Affected Version(s)

Firefox < 140

Firefox ESR < 115.25

Firefox ESR < 128.12

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LJP and HexRabbit (DEVCORE Research Team)
.
CVE-2025-6424 : Use-After-Free Vulnerability in Firefox Affects Mozilla Products