Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2025-0237, CVE-2025-0239, CVE-2025-0240, CVE-2025-0242, CVE-2025-0243, CVE-2025-0247)
Irvan Kurniawan discovered that Firefox incorrectly handled memory when breaking lines in text, leading to a use-after-free vulnerability. An attacker could possibly use this issue to cause a denial of service or possibly execute arbitrary code. (CVE-2025-0238)
Nils Bars discovered that Firefox incorrectly handled memory when using JavaScript Text Segmentation. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-0241)
{ "availability": "No subscription required", "binaries": [ { "binary_version": "134.0+build1-0ubuntu0.20.04.1", "binary_name": "firefox" }, { "binary_version": "134.0+build1-0ubuntu0.20.04.1", "binary_name": "firefox-dev" }, { "binary_version": "134.0+build1-0ubuntu0.20.04.1", "binary_name": "firefox-geckodriver" }, { "binary_version": "134.0+build1-0ubuntu0.20.04.1", "binary_name": "firefox-mozsymbols" } ] }