CVE-2025-13022CWE-703

CVE-2025-13022

Critical · published November 11, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

🚨 A sneaky boundary condition flaw in WebGPU could lead to serious chaos in your graphics engine! 🔥 Think of it like a miscalculated load-bearing wall in a building. If it can’t handle the pressure right, the whole structure risks collapsing under unexpected weight, just like your application under strain from this vulnerability. This critical vulnerability could allow an attacker to execute arbitrary code, potentially leading to crashes or even complete system compromise. We're talking about a scenario where your graphics capabilities could be hijacked, putting your data and security at risk!

Put simply

Think of it like a miscalculated load-bearing wall in a building. If it can’t handle the pressure right, the whole structure risks collapsing under unexpected weight, just like your application under strain from this vulnerability. In Firefox and Thunderbird's WebGPU component, incorrect boundary conditions could allow an attacker to manipulate graphic resources, resulting in unauthorized access or crashes.

What to do

This critical vulnerability could allow an attacker to execute arbitrary code, potentially leading to crashes or even complete system compromise. We're talking about a scenario where your graphics capabilities could be hijacked, putting your data and security at risk! Immediately update Firefox and Thunderbird to versions 145 or higher to mitigate this security risk. Regularly check for updates and consider implementing additional monitoring for unusual graphic processing behavior in your applications. You've got this! Take these steps, and you'll have your defenses strong in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.3th percentile
Weakness
CWE-703 · Improper Check or Handling of Exceptional Conditions
Published
2025-11-11T21:15Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox< 145.0145.0
References (3)
EPSS history
Timeline
  • 11 NOV 15:47Z
    Incorrect boundary conditions in the Graphics: WebGPU component
    cvelistv5