CVE-2025-4918

Published May 17, 2025

Last updated a month ago

Firefox

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-4918 involves an out-of-bounds read or write vulnerability affecting JavaScript `Promise` objects. This vulnerability impacts Firefox versions earlier than 138.0.4, Firefox ESR versions earlier than 128.10.1, and Firefox ESR versions earlier than 115.23.1. The vulnerability stems from the JavaScript Handler component, where manipulating an unknown input leads to an out-of-bounds write. Successful exploitation could compromise confidentiality, integrity, and availability.

Description: An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.
Source: security@mozilla.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-125

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD156D89-BD24-483A-A355-1B45A0A2E66F",
            "versionEndExcluding": "115.23.1"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83AE9635-80D1-49DD-B7A5-8E4E235B1C87",
            "versionEndExcluding": "138.0.4"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7F2F0DE1-8619-4C18-83B0-46E543AE8E9E",
            "versionEndExcluding": "128.10.1",
            "versionStartIncluding": "116.0"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "08FDB838-27AF-43C3-AC02-27C34ED5481A",
            "versionEndExcluding": "128.10.2"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F76ABBB9-7E44-45A0-BEE9-81CD9C0A33ED",
            "versionEndExcluding": "138.0.2",
            "versionStartIncluding": "138.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.