9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.
Basic Information
ID
CVE-2025-9179
Source
mozilla
Published
Aug 19, 2025 at 20:33
Modified
Aug 20, 2025 at 15:18
Affected Product
Vendor
Mozilla
Product
Firefox
Version
unspecified
Affected Versions
Mozilla Firefox unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Firefox ESR unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
Mozilla Thunderbird unspecified
CWE Classification
References
- bugzilla.mozilla.org /show_bug.cgi
- www.mozilla.org /security/advisories/mfsa2025-64/
- www.mozilla.org /security/advisories/mfsa2025-65/
- www.mozilla.org /security/advisories/mfsa2025-66/
- www.mozilla.org /security/advisories/mfsa2025-67/
- www.mozilla.org /security/advisories/mfsa2025-70/
- www.mozilla.org /security/advisories/mfsa2025-71/
- www.mozilla.org /security/advisories/mfsa2025-72/