Critical · published November 11, 2025
🚨 A sneaky boundary condition flaw lets attackers escape the sandbox in WebGPU! 🔥 Think of it as a magical room where guests aren’t supposed to leave, but a tiny, unnoticed crack in the wall allows them to slip out unnoticed. It's like a hotel with a back door that wasn't locked—anyone could wander off to explore the entire building! If exploited, this vulnerability could open the floodgates for attackers, giving them full access to the system and all its secrets. Imagine a thief not only accessing your room but also raiding the entire hotel! This could lead to data breaches and other absolutely devastating consequences.
Think of it as a magical room where guests aren’t supposed to leave, but a tiny, unnoticed crack in the wall allows them to slip out unnoticed. It's like a hotel with a back door that wasn't locked—anyone could wander off to explore the entire building! This vulnerability occurs due to incorrect boundary conditions in the Graphics: WebGPU component, allowing potential escape from its controlled environment. Attackers could leverage this flaw to execute arbitrary code outside the intended security boundaries.
If exploited, this vulnerability could open the floodgates for attackers, giving them full access to the system and all its secrets. Imagine a thief not only accessing your room but also raiding the entire hotel! This could lead to data breaches and other absolutely devastating consequences. Update Firefox and Thunderbird to version 145 immediately to close this critical gap. Regularly review and patch your software to ensure you’re protected against similar vulnerabilities in the future. You've got this! With a quick update, you’ll seal the cracks and keep your systems safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 145.0 | 145.0 |