CVE-2025-14332: Memory safety bugs fixed in Firefox 146 and Thunderbird 146
Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-14332?
CVE-2025-14332 is considered a high severity vulnerability due to potential memory corruption that could allow arbitrary code execution.
How do I fix CVE-2025-14332?
To fix CVE-2025-14332, update Mozilla Firefox and Thunderbird to version 146 or later.
What versions of software are affected by CVE-2025-14332?
CVE-2025-14332 affects Mozilla Firefox and Thunderbird versions prior to 146.
What types of bugs are involved in CVE-2025-14332?
CVE-2025-14332 involves memory safety bugs that may lead to memory corruption.
Can CVE-2025-14332 be exploited remotely?
Yes, CVE-2025-14332 can potentially be exploited remotely if attackers take advantage of the memory safety bugs.