CVE-2025-3034

EPSS 0.44%
Veröffentlicht 01.04.2025 13:15:41
Zuletzt bearbeitet 30.09.2026 18:10:00
Erkennungen
Login

Memory safety bugs fixed in Firefox 137 and Thunderbird 137

Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 137 and Thunderbird 137.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 2 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 137.0

Mozilla ≫ Thunderbird Version < 137.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.44%	0.361

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.mozilla.org/security/advisories/mfsa2025-20/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2025-23/

Vendor Advisory

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1894100%2C1934086%2C1950360

Broken Link

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2025-3034

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-3034

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-3034

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-3034