CVE-2025-4919

Published May 17, 2025

Last updated 3 months ago

Firefox

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-4919 is an out-of-bounds access vulnerability found in Firefox. It occurs during the optimization of linear sums, which could allow an attacker to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. Successful exploitation of this vulnerability could permit an adversary to achieve out-of-bounds read or write, potentially leading to the access of sensitive information or memory corruption, which could pave the way for code execution. This vulnerability affects Firefox ESR versions before 115.23.1 and was credited to Manfred Paul.

Description: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.
Source: security@mozilla.org
NVD status: Analyzed
Products: firefox, thunderbird

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-125

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD156D89-BD24-483A-A355-1B45A0A2E66F",
            "versionEndExcluding": "115.23.1"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83AE9635-80D1-49DD-B7A5-8E4E235B1C87",
            "versionEndExcluding": "138.0.4"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7F2F0DE1-8619-4C18-83B0-46E543AE8E9E",
            "versionEndExcluding": "128.10.1",
            "versionStartIncluding": "116.0"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "08FDB838-27AF-43C3-AC02-27C34ED5481A",
            "versionEndExcluding": "128.10.2"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F76ABBB9-7E44-45A0-BEE9-81CD9C0A33ED",
            "versionEndExcluding": "138.0.2",
            "versionStartIncluding": "138.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.