CVE-2025-49710: Integer overflow in OrderedHashTable

Q: What is the severity of CVE-2025-49710?

CVE-2025-49710 has a high severity rating due to the potential for exploitation that could lead to code execution.

Q: How do I fix CVE-2025-49710?

To fix CVE-2025-49710, update your Firefox browser to version 139.0.4 or later.

Q: What versions of Firefox are affected by CVE-2025-49710?

CVE-2025-49710 affects all versions of Firefox prior to 139.0.4.

Q: What type of vulnerability is CVE-2025-49710?

CVE-2025-49710 is classified as an integer overflow vulnerability within the JavaScript engine.

Q: Can CVE-2025-49710 be exploited remotely?

Yes, CVE-2025-49710 can potentially be exploited remotely if the user visits a malicious website.

Published Jun 10, 2025

Updated

An integer overflow was present in OrderedHashTable used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4.

Other sources

An integer overflow was present in OrderedHashTable used by the JavaScript engine

— Mozilla

Affected Software

2 affected componentsFixes available

Mozilla Firefox<139.0.4

139.0.4

Mozilla Firefox<139.0.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox to a version that resolves this vulnerability.
Fixed in 139.0.4

Event History

Jun 10, 2025

CVE Published

via Mozilla·12:00 AM

Jun 11, 2025

CVE Published

via MITRE·12:07 PM

Data Sourced

via MITRE·12:07 PM

Description

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

MFSA2025-47

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2025-49710?

CVE-2025-49710 has a high severity rating due to the potential for exploitation that could lead to code execution.

How do I fix CVE-2025-49710?