8.8
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Memory safety bugs present in Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.
Basic Information
ID
CVE-2025-8034
Source
mozilla
Published
Jul 22, 2025 at 20:49
Modified
Jul 31, 2025 at 14:07
Affected Product
Vendor
Mozilla
Product
Firefox
Version
unspecified
Affected Versions
Mozilla Firefox unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
CWE Classification
References
- bugzilla.mozilla.org /show_bug.cgi
- www.mozilla.org /security/advisories/mfsa2025-56/
- www.mozilla.org /security/advisories/mfsa2025-57/
- www.mozilla.org /security/advisories/mfsa2025-58/
- www.mozilla.org /security/advisories/mfsa2025-59/
- www.mozilla.org /security/advisories/mfsa2025-61/
- www.mozilla.org /security/advisories/mfsa2025-62/
- www.mozilla.org /security/advisories/mfsa2025-63/