CVE-2025-1934

CVE-2025-1934

Medium · published March 4, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00453 · 38.3th percentile
Published
2025-03-04T19:15Z
Affected products (4)
ProductVersionsFixed in
mozilla/firefox< 128.8.0128.8.0
mozilla/firefox< 136.0136.0
mozilla/thunderbird< 128.8.0128.8.0
mozilla/thunderbird≥ 129.0, < 136.0136.0
References (6)
https://bugzilla.mozilla.org/show_bug.cgi?id=1942881 · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-14/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-16/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-17/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-18/ · [email protected]https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 04 MAR 13:31Z
    Unexpected GC during RegExp bailout processing
    cvelistv5