CVE-2025-4087CWE-125

CVE-2025-4087

Medium · published April 29, 2025

CVSS v3.1
4.8
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Thunderbird 138, and Thunderbird 128.10.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-04-29T18:15Z
Affected products (4)
ProductVersionsFixed in
mozilla/firefox< 128.10128.10
mozilla/firefox< 138.0138.0
mozilla/thunderbird< 128.10.0128.10.0
mozilla/thunderbird< 138.0138.0
References (6)
https://bugzilla.mozilla.org/show_bug.cgi?id=1952465 · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-28/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-29/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-31/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-32/ · [email protected]https://lists.debian.org/debian-lts-announce/2025/05/msg00024.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 APR 13:13Z
    Unsafe attribute access during XPath parsing
    cvelistv5