CVE-2025-1934

MEDIUM

Firefox < 136.0 and 128.8-128.* - Remote Code Execution via RegExp Bailout Interruption

Title source: llm

Description

It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.

References (6)

Core 6

Core References

Mailing List

https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html

Issue Tracking, Permissions Required

https://bugzilla.mozilla.org/show_bug.cgi?id=1942881

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2025-14/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2025-16/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2025-17/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2025-18/

Scores

CVSS v3 6.5

EPSS 0.0034

EPSS Percentile 56.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

Status published

Products (7)

mozilla/firefox < 128.8.0

mozilla/firefox < 136.0

Mozilla/Firefox 128.8 - 128.*

Mozilla/Firefox 136

mozilla/thunderbird < 128.8.0

Mozilla/Thunderbird 128.8 - 128.*

Mozilla/Thunderbird 136

Published Mar 04, 2025

Tracked Since Feb 18, 2026