CVE-2025-0241: Memory corruption when using JavaScript Text Segmentation
Last updated 9 January 2025
Other sources
When segmenting specially crafted text, segmentation would corrupt memory leading to a potentially exploitable crash.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 134.0-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 128.6.0esr-1~deb12u1Fixed in 128.6.0esr-1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 134 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 128.6 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 128.6 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 134 - Upgrade
Upgrade
Thunderbird ESRto a version that resolves this vulnerability.Fixed in 128.6
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-0241?
CVE-2025-0241 is classified as a potentially exploitable crash vulnerability that can lead to memory corruption.
How do I fix CVE-2025-0241?
To fix CVE-2025-0241, update Firefox to version 134.0-1 or Firefox ESR to version 128.6.0esr-1.
Which software is affected by CVE-2025-0241?
CVE-2025-0241 affects Mozilla Firefox, Firefox ESR, and Thunderbird prior to specified versions.
What happens if CVE-2025-0241 is exploited?
Exploitation of CVE-2025-0241 may lead to application crashes or potential arbitrary code execution.
How can I determine if my version of Firefox is vulnerable to CVE-2025-0241?
You can determine if your version of Firefox is vulnerable to CVE-2025-0241 by checking if it is older than version 134.