CVE-2025-0241

HIGH

Firefox <134 - Memory Corruption

Title source: llm

Description

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

References (6)

[Mailing List] https://lists.debian.org/debian-lts-announce/2025/01/msg00004.html

[Issue Tracking, Permissions Required] https://bugzilla.mozilla.org/show_bug.cgi?id=1933023

[Vendor Advisory] https://www.mozilla.org/security/advisories/mfsa2025-01/

[Vendor Advisory] https://www.mozilla.org/security/advisories/mfsa2025-02/

[Vendor Advisory] https://www.mozilla.org/security/advisories/mfsa2025-04/

[Vendor Advisory] https://www.mozilla.org/security/advisories/mfsa2025-05/

Scores

CVSS v3 7.7

EPSS 0.0007

EPSS Percentile 22.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Classification

CWE

CWE-401

Status published

Affected Products (3)

mozilla/firefox < 128.6.0

mozilla/firefox < 134.0

mozilla/thunderbird < 128.6.0

Timeline

Published Jan 07, 2025

Tracked Since Feb 18, 2026