Uninitialized Memory Vulnerability in Firefox and Thunderbird by Mozilla

CVE-2025-9181

What is CVE-2025-9181?

This vulnerability is related to uninitialized memory within the JavaScript Engine component of Firefox and Thunderbird. Affected versions include Firefox versions prior to 142, and Thunderbird versions before 142. The flaw may allow attackers to exploit uninitialized memory, potentially leading to information leaks or arbitrary code execution. Users are advised to update their software to mitigate the risks associated with this vulnerability.

References