CVE-2025-0241

Description

When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

Reserved 2025-01-06 | Published 2025-01-07 | Updated 2025-01-13 | Assigner mozilla

Problem types

Memory corruption when using JavaScript Text Segmentation

Product status

Any version before 134
affected

Any version before 128.6
affected

Any version before 134
affected

Any version before 128.6
affected

Credits

Nils Bars

References

bugzilla.mozilla.org/show_bug.cgi?id=1933023

www.mozilla.org/security/advisories/mfsa2025-01/

www.mozilla.org/security/advisories/mfsa2025-02/

www.mozilla.org/security/advisories/mfsa2025-04/

www.mozilla.org/security/advisories/mfsa2025-05/

cve.org (CVE-2025-0241)

nvd.nist.gov (CVE-2025-0241)

Download JSON