CVE-2025-13021CWE-703

CVE-2025-13021

Critical · published November 11, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
31.2
In the wild
Unconfirmed
What it is

🔥 A single input can crash your graphics processing! An incorrect boundary condition in the Graphics: WebGPU component opens the door to potential chaos. ⚠️ Think of this vulnerability like a poorly designed roller coaster that can fly off the track if a car exceeds its weight limit — it’s not just a ride, it’s a catastrophe waiting to happen! If exploited, an attacker could leverage this flaw to crash the browser or email client, leading to loss of unsaved work or sensitive data. In a worst-case scenario, it could allow attackers to execute arbitrary code, bringing your entire system into jeopardy!

Put simply

Think of this vulnerability like a poorly designed roller coaster that can fly off the track if a car exceeds its weight limit — it’s not just a ride, it’s a catastrophe waiting to happen! This vulnerability in Firefox and Thunderbird results from incorrect handling of boundary conditions in the WebGPU component, which can lead to crashes or code execution. This means the system doesn’t properly check inputs, allowing unsafe operations!

What to do

If exploited, an attacker could leverage this flaw to crash the browser or email client, leading to loss of unsaved work or sensitive data. In a worst-case scenario, it could allow attackers to execute arbitrary code, bringing your entire system into jeopardy! Immediately update Firefox and Thunderbird to version 145 or higher to patch this vulnerability. Ensure to review any related system configurations that may be affected by these updates. Regularly check for software updates to maintain security. 🛡️ You got this! Act fast, follow these steps, and keep your system secure. 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.2th percentile
Weakness
CWE-703 · Improper Check or Handling of Exceptional Conditions
Published
2025-11-11T21:15Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox< 145.0145.0
References (3)
EPSS history
Timeline
  • 11 NOV 15:47Z
    Incorrect boundary conditions in the Graphics: WebGPU component
    cvelistv5