PT-2025-6917

CVE-2025-1414

Published

2025-02-18

Updated

2025-11-19

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 135.0.1

Description: Memory safety bugs are present in Firefox, with some showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.

Recommendations: For versions prior to 135.0.1, update to version 135.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive features or data until the update is applied.

Exploitability

Fix

Impacts

Researchers

Andrew Mccreight

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write

CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')

Related identifiers