Memory Safety Vulnerability in Firefox and Thunderbird by Mozilla
CVE-2025-8044

9.8CRITICAL

Key Information:

Vendor

Mozilla
Status
Firefox
Thunderbird
Vendor
CVE Published:
22 July 2025

What is CVE-2025-8044?

Multiple memory safety issues have been identified in Firefox and Thunderbird, specifically in versions prior to 141. These vulnerabilities exhibit signs of memory corruption which, if leveraged, could potentially enable the execution of arbitrary code. Users of affected versions are encouraged to update to the latest releases to mitigate these risks.

Affected Version(s)

Firefox < 141

Thunderbird < 141

References

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1933572%2...
https://www.mozilla.org/security/advisories/mfsa2025-56/
https://www.mozilla.org/security/advisories/mfsa2025-61/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Akmat Suleimanov, Andrew McCreight
.
CVE-2025-8044 : Memory Safety Vulnerability in Firefox and Thunderbird by Mozilla