From 14b335cdfe692cff6520be95840779ea25f48904 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fernando=20Apestegu=C3=ADa?= Date: Thu, 3 Apr 2025 18:01:53 +0200 Subject: [PATCH] security/vuxml: Mozilla multiple vulnerabilities * CVE-2025-1931 * CVE-2025-1933 * CVE-2025-1934 * CVE-2025-1935 * CVE-2025-1937 * CVE-2025-1938 * CVE-2025-1943 --- security/vuxml/vuln/2025.xml | 192 +++++++++++++++++++++++++++++++++++ 1 file changed, 192 insertions(+) diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index 7022540c7529..bafcb1a125d5 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,195 @@ + + mozilla -- memory corruption + + + firefox + 136.0,2 + + + thunderbird + 136.0 + + + + +

security@mozilla.org reports:

+
+

Memory safety bugs present in Firefox 135 and Thunderbird + 135. Some of these bugs showed evidence of memory corruption + and we presume that with enough effort some of these could + have been exploited to run arbitrary code.

+
+ + + + CVE-2025-1943 + https://nvd.nist.gov/vuln/detail/CVE-2025-1943 + + + 2025-03-04 + 2025-04-03 + + + + + mozilla -- memory corruption + + + firefox + 136.0,2 + + + firefox-esr + 128.8,1 + + + thunderbird + 136.0 + + + + +

security@mozilla.org reports:

+
+

CVE-2025-1938: Memory safety bugs present in Firefox 135, + Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. + Some of these bugs showed evidence of memory corruption and + we presume that with enough effort some of these could have + been exploited to run arbitrary code.

+

CVE-2025-1935: A web page could trick a user into setting + that site as the default handler for a custom URL protocol.

+

CVE-2025-1934: It was possible to interrupt the processing + of a RegExp bailout and run additional JavaScript, potentially + triggering garbage collection when the engine was not + expecting it.

+
+ + + + CVE-2025-1938 + https://nvd.nist.gov/vuln/detail/CVE-2025-1938 + CVE-2025-1935 + https://nvd.nist.gov/vuln/detail/CVE-2025-1935 + CVE-2025-1934 + https://nvd.nist.gov/vuln/detail/CVE-2025-1934 + + + 2025-03-04 + 2025-04-03 + + + + + mozilla -- Memory safety bugs + + + firefox + 136.0,2 + + + firefox-esr + 115.21,1 + + + thunderbird + 136.0 + + + + +

security@mozilla.org reports:

+
+

Memory safety bugs present in Firefox 135, Thunderbird 135, + Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. + Some of these bugs showed evidence of memory corruption and + we presume that with enough effort some of these could have + been exploited to run arbitrary code.

+
+ + + + CVE-2025-1937 + https://nvd.nist.gov/vuln/detail/CVE-2025-1937 + + + 2025-03-04 + 2025-04-03 + + + + + mozilla -- use-after-free in WebTransport connection + + + firefox + 136.0,2 + + + firefox-esr + 115.21,1 + + + thunderbird + 136.0 + + + + +

security@mozilla.org reports:

+
+

It was possible to cause a use-after-free in the content + process side of a WebTransport connection, leading to a + potentially exploitable crash.

+
+ + + + CVE-2025-1931 + https://nvd.nist.gov/vuln/detail/CVE-2025-1931 + + + 2025-03-04 + 2025-04-03 + + + + + mozilla -- 64 bit JIT WASM read on left over memroy + + + firefox + 136.0,2 + + + firefox-esr + 115.21,1 + + + thunderbird + 136.0 + + + + +

security@mozilla.org reports:

+
+

On 64-bit CPUs, when the JIT compiles WASM i32 return + values they can pick up bits from left over memory. + This can potentially cause them to be treated as a different + type.

+
+ + + + CVE-2025-1933 + https://nvd.nist.gov/vuln/detail/CVE-2025-1933 + + + 2025-03-04 + 2025-04-03 + + + MongoDB -- crash due to improper validation of explain command