VDB
ANCHORE-2025-1930
ANCHORE-2025-1930
PUBLISHED
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. This vulnerability affects Firefox < 136, Firefox ESR < 115.21, Firefox ESR < 128.8, Thunderbird < 136, and Thunderbird < 128.8.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox ESR | 0, 116, 0 |
| Mozilla | Thunderbird | 129, 129, 129 |
| Mozilla | Firefox | 0, 0, 0 |
Timeline
- Mar 4, 2025 CVE Published
- Mar 4, 2025 CVE Updated
References
- https://www.mozilla.org/security/advisories/mfsa2025-14/ url
- https://bugzilla.mozilla.org/show_bug.cgi?id=1902309 url
- https://www.mozilla.org/security/advisories/mfsa2025-15/ url
- https://www.mozilla.org/security/advisories/mfsa2025-16/ url
- https://www.mozilla.org/security/advisories/mfsa2025-17/ url
- https://www.mozilla.org/security/advisories/mfsa2025-18/ url