Vulnerability CVE-2025-0247: Information

Description

Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134 and Thunderbird < 134.

URL: https://nvd.nist.gov/vuln/detail/CVE-2025-0247
Published: Jan. 7, 2025
Modified: Jan. 14, 2025

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus134.0-alt1134.0.2-alt1ALT-PU-2025-1063-2368493Fixed
firefoxsisyphus_riscv64134.0-alt0.port134.0.1-alt0.portALT-PU-2025-1265-1-Fixed
firefoxsisyphus_loongarch64134.0-alt0.port134.0.1-alt0.portALT-PU-2025-1271-1-Fixed
firefoxp11134.0.2-alt1133.0.0-alt1ALT-PU-2025-1984-1371739Testing

References to Advisories, Solutions, and Tools

Hyperlink
Resource
Memory safety bugs fixed in Firefox 134 and Thunderbird 134
    https://www.mozilla.org/security/advisories/mfsa2025-01/
      https://www.mozilla.org/security/advisories/mfsa2025-04/
        VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
        Version: v24.12.2
        Back to top