Memory safety bugs fixed in Firefox 146.0.1_CVE-2025-14861

8.8 / 10

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 146.0.1.

AI Analysis

Memory safety bugs in Firefox allow for arbitrary code execution

Basic Information

ID CVE-2025-14861

Source mozilla

Published Dec 18, 2025 at 14:21

Modified Dec 18, 2025 at 15:39

Affected Product

Vendor Mozilla

Product Firefox

Version unspecified

Affected Versions Mozilla Firefox unspecified

CWE Classification

CWE-119

AI Assessment

AI Score 8.8 / 10

AI Severity High

Vendor Mozilla Foundation

Product Firefox

Version < 146.0.1

References

{
    "lastseen": "",
    "description": "Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 146.0.1.",
    "published": "2025-12-18T14:21:14.680Z",
    "modified": "2025-12-18T15:39:55.092Z",
    "type": "cve",
    "title": "Memory safety bugs fixed in Firefox 146.0.1",
    "source": "mozilla",
    "references": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1996570%2C1999700\nhttps://www.mozilla.org/security/advisories/mfsa2025-98/",
    "id": "CVE-2025-14861",
    "bulletinFamily": "",
    "cwe": [
        "CWE-119"
    ],
    "cvelist": null,
    "sourceData": "Mozilla Firefox unspecified",
    "sourceHref": "",
    "cvss": {
        "score": 8.8,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Firefox",
    "version": "unspecified",
    "vendor": "Mozilla",
    "ai_description": "Memory safety bugs in Firefox allow for arbitrary code execution",
    "ai_severity": "High",
    "ai_vendor": "Mozilla Foundation",
    "ai_product": "Firefox",
    "ai_version": "< 146.0.1",
    "ai_score": 8.8
}