CVE-2025-4919CWE-125CWE-787

CVE-2025-4919

High · published May 18, 2025

CVSS v3.1

8.8

EPSS

Percentile

95.1

In the wild

Unconfirmed

What it is

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability was fixed in Firefox 138.0.4, Firefox ESR 128.10.1, Firefox ESR 115.23.1, Thunderbird 128.10.2, and Thunderbird 138.0.2.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.08672 · 95.1th percentile
Weaknesses: CWE-125 · Out-of-bounds Read; CWE-787 · Out-of-bounds Write
Published: 2025-05-18T02:15Z

Affected products (5)

Product	Versions	Fixed in
mozilla/firefox	< 115.23.1	115.23.1
mozilla/firefox	< 138.0.4	138.0.4
mozilla/firefox	≥ 116.0, < 128.10.1	128.10.1
mozilla/thunderbird	< 128.10.2	128.10.2
mozilla/thunderbird	≥ 138.0, < 138.0.2	138.0.2

References (8)

https://bugzilla.mozilla.org/show_bug.cgi?id=1966614 · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-36/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-37/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-38/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-40/ · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-41/ · [email protected]https://lists.debian.org/debian-lts-announce/2025/05/msg00024.html · af854a3a-2127-422b-91ae-364da2661108 https://lists.debian.org/debian-lts-announce/2025/05/msg00046.html · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

17 MAY 21:07Z
Out-of-bounds access when optimizing linear sums
cvelistv5