VDB

GCVE-110-MAGEIA-2025-45

GCVE-110-MAGEIA-2025-45
Advisory Published
Vulnetix · Advisory published February 9, 2025
Use-after-free in XSLT. (CVE-2025-1009) Use-after-free in Custom Highlight. (CVE-2025-1010) A bug in WebAssembly code generation could result in a crash. (CVE-2025-1011) Use-after-free during concurrent delazification. (CVE-2025-1012) Potential double-free vulnerability in PKCS#7 decryption handling. (CVE-2024-11704) Potential opening of private browsing tabs in normal browsing windows. (CVE-2025-1013) Certificate length was not properly checked. (CVE-2025-1014) Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 115.20, and Thunderbird 128.7. (CVE-2025-1016) Memory safety bugs fixed in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. (CVE-2025-1017)

Affected Products

VendorProductVersionsPlatforms
Mageiafirefox0 (affected), 128.7.0-1.mga9 (unaffected), 0 (affected), 128.7.0-1.mga9 (unaffected)
Mageiafirefox-l10n0 (affected), 128.7.0-1.mga9 (unaffected), 0 (affected), 128.7.0-1.mga9 (unaffected)
Mageiarootcerts0 (affected), 20250130.00-1.mga9 (unaffected), 0 (affected), 20250130.00-1.mga9 (unaffected)
Mageianss0 (affected), 3.108.0-1.mga9 (unaffected), 0 (affected), 3.108.0-1.mga9 (unaffected)
Mageiayt-dlp0 (affected), 2025.04.30-1.mga9 (unaffected)

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›