CVE-2025-4087
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-4087
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-4087.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-4087
- Downstream
- Related
- Published
- 2025-04-29T14:15:35Z
- Modified
- 2025-09-23T15:15:30Z
- Summary
- [none]
- Details
-
A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and Thunderbird < 128.10.
- References