CVE-2025-8044: Memory safety bugs fixed in Firefox 141 and Thunderbird 141
Memory safety bugs present in Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 141 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 141 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 141
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-8044?
CVE-2025-8044 is considered a high severity vulnerability due to its potential for memory corruption and possible arbitrary code execution.
How do I fix CVE-2025-8044?
To resolve CVE-2025-8044, users should update to Mozilla Firefox version 141 or later.
What software is affected by CVE-2025-8044?
CVE-2025-8044 affects Mozilla Firefox versions prior to 141 and Thunderbird versions prior to 141.
Can CVE-2025-8044 be exploited remotely?
Yes, CVE-2025-8044 could potentially be exploited remotely if a malicious actor takes advantage of the memory safety bugs.
What are the potential consequences of CVE-2025-8044?
Exploitation of CVE-2025-8044 could allow attackers to execute arbitrary code on the affected system, posing significant security risks.