7.3

CVE-2025-5272

EPSS 0.37%
Veröffentlicht 27.05.2025 12:29:30
Zuletzt bearbeitet 13.04.2026 15:17:05
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

Memory safety bugs fixed in Firefox 139 and Thunderbird 139

Memory safety bugs present in Firefox 138 and Thunderbird 138. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 139 and Thunderbird 139.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 2 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 139.0

Mozilla ≫ Thunderbird Version < 139.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.37%	0.583

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.3	3.9	3.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.mozilla.org/security/advisories/mfsa2025-42/

Vendor Advisory

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1726254%2C1742738%2C1960121

Broken Link

https://www.mozilla.org/security/advisories/mfsa2025-45/

https://nvd.nist.gov/vuln/detail/CVE-2025-5272

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-5272

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-5272

EUVD