CVE-2025-11709CWE-787

CVE-2025-11709

Critical · published October 14, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

🚨 A compromised web process can trigger out-of-bounds reads and writes, making this a critical vulnerability hiding in WebGL textures! 🔥 Think of it like a sneaky intruder who finds a way to access the high-security vault of a bank simply by manipulating the layout of the lobby. Just as the bank’s security protocols should prevent unauthorized access, the web process should not allow these manipulations to escalate into more privileged areas. An attacker could exploit this to gain unauthorized access to sensitive data or even execute malicious code, leaving users vulnerable to devastating consequences. This could lead to a complete compromise of user systems or data breaches that are mind-blowingly serious!

Put simply

Think of it like a sneaky intruder who finds a way to access the high-security vault of a bank simply by manipulating the layout of the lobby. Just as the bank’s security protocols should prevent unauthorized access, the web process should not allow these manipulations to escalate into more privileged areas. This vulnerability in Firefox and Thunderbird allows a compromised web process to perform out-of-bounds reads and writes by manipulating WebGL textures, potentially escalating privileges in the process.

What to do

An attacker could exploit this to gain unauthorized access to sensitive data or even execute malicious code, leaving users vulnerable to devastating consequences. This could lead to a complete compromise of user systems or data breaches that are mind-blowingly serious! Immediately update to the fixed versions: Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, and Thunderbird 144 or 140.4. Ensure that all users are using updated browsers to protect against this vulnerability. Conduct audits to confirm that outdated versions are not in use on any systems. You've got this! By taking these steps, you can keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-10-14T17:15Z
Affected products (4)
ProductVersionsFixed in
mozilla/firefox< 115.29.0115.29.0
mozilla/firefox< 144.0144.0
mozilla/firefox≥ 116.0, < 140.4.0140.4.0
mozilla/thunderbird< 144.0144.0
References (8)
EPSS history
Timeline
  • 14 OCT 12:27Z
    Out of bounds read/write in a privileged process triggered by WebGL textures
    cvelistv5