CVE-2025-0247CWE-787

CVE-2025-0247

Critical · published January 7, 2025

CVSS v3.1
9.8
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

🔥 A memory safety bug in Firefox 133 and Thunderbird 133 could let attackers turn your browser into their playground! Think of it like a restaurant kitchen where the chefs accidentally use rotten ingredients. If no one checks the quality before cooking, the meal could end up dangerously unsafe – in this case, it’s your data at risk! An attacker could potentially exploit these memory corruption bugs to run any code they desire on your system, leading to data theft, system compromise, or even total chaos! The stakes are high, given the critical nature of this vulnerability.

Put simply

Think of it like a restaurant kitchen where the chefs accidentally use rotten ingredients. If no one checks the quality before cooking, the meal could end up dangerously unsafe – in this case, it’s your data at risk! This vulnerability involves memory safety issues that can lead to memory corruption, allowing attackers to execute arbitrary code if they invest enough effort into exploitation. Firefox 134 and Thunderbird 134 have addressed these issues in their latest versions.

What to do

An attacker could potentially exploit these memory corruption bugs to run any code they desire on your system, leading to data theft, system compromise, or even total chaos! The stakes are high, given the critical nature of this vulnerability. Update your Firefox and Thunderbird to version 134 immediately to protect against this critical vulnerability. Regularly check for updates to ensure you're running the latest, most secure versions! You've got this! Fixing this is a quick win for your security game! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.10609 · 95.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-01-07T21:15Z
Affected products (2)
ProductVersionsFixed in
mozilla/firefox< 134.0134.0
mozilla/thunderbird< 134.0134.0
References (3)
EPSS history
Timeline
  • 07 JAN 16:07Z
    Memory safety bugs fixed in Firefox 134 and Thunderbird 134
    cvelistv5