CVE-2025-5262

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 139 Firefox ESR versions prior to 115.24 Firefox ESR versions prior to 128.11

Description A double-free issue could occur in the vpx codec enc init multi function after a failed allocation when initializing the encoder for WebRTC, potentially causing memory corruption and a crash.

Recommendations For Firefox versions prior to 139, update to version 139 or later. For Firefox ESR versions prior to 115.24, update to version 115.24 or later. For Firefox ESR versions prior to 128.11, update to version 128.11 or later.