REDHAT-BUG-2336175
First published: Tue Jan 07 2025(Updated: )
Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134 and Firefox ESR < 128.6.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | <134 | |
| Firefox ESR | <128.6 | |
| Thunderbird | <134 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2025:0080
- https://access.redhat.com/errata/RHSA-2025:0133
- https://access.redhat.com/errata/RHSA-2025:0135
- https://access.redhat.com/errata/RHSA-2025:0134
- https://access.redhat.com/errata/RHSA-2025:0132
- https://access.redhat.com/errata/RHSA-2025:0136
- https://access.redhat.com/errata/RHSA-2025:0138
- https://access.redhat.com/errata/RHSA-2025:0137
- https://access.redhat.com/errata/RHSA-2025:0147
- https://access.redhat.com/errata/RHSA-2025:0144
- https://access.redhat.com/errata/RHSA-2025:0162
- https://access.redhat.com/errata/RHSA-2025:0165
- https://access.redhat.com/errata/RHSA-2025:0166
- https://access.redhat.com/errata/RHSA-2025:0167
- https://access.redhat.com/errata/RHSA-2025:0275
- https://access.redhat.com/errata/RHSA-2025:0281
- https://access.redhat.com/errata/RHSA-2025:0284
- https://access.redhat.com/errata/RHSA-2025:0287
- https://access.redhat.com/errata/RHSA-2025:0286
- https://bugzilla.redhat.com/show_bug.cgi?id=2336175
Frequently Asked Questions
What is the severity of REDHAT-BUG-2336175?
The severity of REDHAT-BUG-2336175 is considered high due to potential memory corruption issues that could lead to arbitrary code execution.
How do I fix REDHAT-BUG-2336175?
To fix REDHAT-BUG-2336175, update to Firefox version 134, Firefox ESR version 128.6, or Thunderbird version 134.
What versions are affected by REDHAT-BUG-2336175?
REDHAT-BUG-2336175 affects Firefox versions prior to 134, Firefox ESR versions prior to 128.6, and Thunderbird versions prior to 134.
What are memory safety bugs in REDHAT-BUG-2336175?
Memory safety bugs in REDHAT-BUG-2336175 refer to vulnerabilities that can lead to memory corruption, potentially allowing attackers to execute arbitrary code.
Is there a risk of exploitation with REDHAT-BUG-2336175?
Yes, there is a risk of exploitation with REDHAT-BUG-2336175, especially with sufficient effort to exploit the memory corruption vulnerabilities.
- agent/severity
- agent/first-publish-date
- agent/type
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-0243
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/mozilla
- canonical/firefox
- canonical/firefox esr
- canonical/thunderbird