JavaScript Engine Vulnerability in Firefox and Thunderbird

CVE-2025-8033

What is CVE-2025-8033?

This vulnerability occurs in the JavaScript engine, where closed generators are improperly handled, allowing them to be resumed unintentionally. This leads to potential null pointer dereference scenarios, which could allow an attacker to exploit this condition and affect the stability and security of the affected products. Users of Firefox and Thunderbird are advised to update to the latest versions to mitigate this risk.

References