6.5
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.
Basic Information
ID
CVE-2025-8033
Source
mozilla
Published
Jul 22, 2025 at 20:49
Modified
Jul 23, 2025 at 13:39
Affected Product
Vendor
Mozilla
Product
Firefox
Version
unspecified
Affected Versions
Mozilla Firefox unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
CWE Classification
References
- bugzilla.mozilla.org /show_bug.cgi
- www.mozilla.org /security/advisories/mfsa2025-56/
- www.mozilla.org /security/advisories/mfsa2025-57/
- www.mozilla.org /security/advisories/mfsa2025-58/
- www.mozilla.org /security/advisories/mfsa2025-59/
- www.mozilla.org /security/advisories/mfsa2025-61/
- www.mozilla.org /security/advisories/mfsa2025-62/
- www.mozilla.org /security/advisories/mfsa2025-63/