REDHAT-BUG-2336181
First published: Tue Jan 07 2025(Updated: )
Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox ESR 128.5, Thunderbird 115.18, and Thunderbird 128.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, and Firefox ESR < 115.19.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | <134 | |
| Firefox ESR | <128.6<115.19 | |
| Thunderbird | <134 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2025:0080
- https://access.redhat.com/errata/RHSA-2025:0133
- https://access.redhat.com/errata/RHSA-2025:0135
- https://access.redhat.com/errata/RHSA-2025:0134
- https://access.redhat.com/errata/RHSA-2025:0132
- https://access.redhat.com/errata/RHSA-2025:0136
- https://access.redhat.com/errata/RHSA-2025:0138
- https://access.redhat.com/errata/RHSA-2025:0137
- https://access.redhat.com/errata/RHSA-2025:0147
- https://access.redhat.com/errata/RHSA-2025:0144
- https://access.redhat.com/errata/RHSA-2025:0162
- https://access.redhat.com/errata/RHSA-2025:0165
- https://access.redhat.com/errata/RHSA-2025:0166
- https://access.redhat.com/errata/RHSA-2025:0167
- https://access.redhat.com/errata/RHSA-2025:0275
- https://access.redhat.com/errata/RHSA-2025:0281
- https://access.redhat.com/errata/RHSA-2025:0284
- https://access.redhat.com/errata/RHSA-2025:0287
- https://access.redhat.com/errata/RHSA-2025:0286
- https://bugzilla.redhat.com/show_bug.cgi?id=2336181
Frequently Asked Questions
What is the severity of REDHAT-BUG-2336181?
The severity of REDHAT-BUG-2336181 is high due to the potential for memory corruption that could lead to arbitrary code execution.
How do I fix REDHAT-BUG-2336181?
To fix REDHAT-BUG-2336181, update affected versions of Firefox or Thunderbird to the latest stable release.
Which versions of Firefox and Thunderbird are affected by REDHAT-BUG-2336181?
REDHAT-BUG-2336181 affects Firefox versions up to 134 and Thunderbird versions up to 134.
Is there a risk of exploitation in REDHAT-BUG-2336181?
Yes, with sufficient effort, there is a possibility that the memory safety bugs described in REDHAT-BUG-2336181 could be exploited.
Who is responsible for the vulnerabilities mentioned in REDHAT-BUG-2336181?
The vulnerabilities are associated with Mozilla and affect their products, Firefox and Thunderbird.
- agent/severity
- agent/first-publish-date
- agent/type
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-0242
- agent/last-modified-date
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/mozilla
- canonical/firefox
- canonical/firefox esr
- canonical/thunderbird