CVE-2025-14332

EPSS 0.05%
Veröffentlicht 09.12.2025 13:38:08
Zuletzt bearbeitet 13.04.2026 15:16:46
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

Memory safety bugs fixed in Firefox 146 and Thunderbird 146

Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146 and Thunderbird 146.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 2 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox SwEdition- Version < 146.0

Mozilla ≫ Thunderbird SwEdition- Version < 146.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.143

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.3	3.9	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.3	3.9	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.mozilla.org/security/advisories/mfsa2025-92/

Vendor Advisory

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1963153%2C1985058%2C1995637%2C1997118

Broken Link

Issue Tracking

https://www.mozilla.org/security/advisories/mfsa2025-95/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-14332

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-14332

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-14332

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-14332