ByteOS Network

NVD Vulnerability Details :

CVE-2025-5272

Modified

Source-security@mozilla.org

Published At-27 May, 2025 | 13:15

Updated At-11 Jun, 2025 | 12:15

Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 139 and Thunderbird < 139.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Type: Secondary

Version: 3.1

Base score: 7.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CPE Matches

Mozilla Corporation

>>firefox>>Versions before 139.0(exclusive)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Mozilla Corporation

>>thunderbird>>Versions before 139.0(exclusive)

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-787

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1726254%2C1742738%2C1960121	security@mozilla.org	Broken Link
https://www.mozilla.org/security/advisories/mfsa2025-42/	security@mozilla.org	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-45/	security@mozilla.org	N/A

Hyperlink: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1726254%2C1742738%2C1960121

Source: security@mozilla.org

Resource:

Broken Link

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2025-42/

Source: security@mozilla.org

Resource:

Vendor Advisory

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2025-45/

Source: security@mozilla.org

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History