Description (CNA)
A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mozilla / Firefox | unaffected 128.7 through 128.*; unaffected 135 through * |
| Mozilla / Thunderbird | unaffected 128.7 through 128.*; unaffected 135 through * |
CWE
No CWE identifiers supplied.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1936454
- https://www.mozilla.org/security/advisories/mfsa2025-07/
- https://www.mozilla.org/security/advisories/mfsa2025-09/
- https://www.mozilla.org/security/advisories/mfsa2025-10/
- https://www.mozilla.org/security/advisories/mfsa2025-11/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.