REDHAT-BUG-2343748
First published: Tue Feb 04 2025(Updated: )
Memory safety bugs present in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | <135 | |
| Firefox ESR | <128.7 | |
| Thunderbird | <135<128.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2025:1066
- https://access.redhat.com/errata/RHSA-2025:1133
- https://access.redhat.com/errata/RHSA-2025:1135
- https://access.redhat.com/errata/RHSA-2025:1138
- https://access.redhat.com/errata/RHSA-2025:1136
- https://access.redhat.com/errata/RHSA-2025:1132
- https://access.redhat.com/errata/RHSA-2025:1137
- https://access.redhat.com/errata/RHSA-2025:1139
- https://access.redhat.com/errata/RHSA-2025:1140
- https://access.redhat.com/errata/RHSA-2025:1184
- https://access.redhat.com/errata/RHSA-2025:1283
- https://access.redhat.com/errata/RHSA-2025:1292
- https://access.redhat.com/errata/RHSA-2025:1319
- https://access.redhat.com/errata/RHSA-2025:1317
- https://access.redhat.com/errata/RHSA-2025:1318
- https://access.redhat.com/errata/RHSA-2025:1339
- https://access.redhat.com/errata/RHSA-2025:1340
- https://access.redhat.com/errata/RHSA-2025:1341
- https://access.redhat.com/errata/RHSA-2025:1348
- https://bugzilla.redhat.com/show_bug.cgi?id=2343748
Frequently Asked Questions
What is the severity of REDHAT-BUG-2343748?
The severity of REDHAT-BUG-2343748 is critical due to the potential for arbitrary code execution through memory safety bugs.
How do I fix REDHAT-BUG-2343748?
To fix REDHAT-BUG-2343748, update your Mozilla Firefox, Firefox ESR, and Thunderbird to the latest versions released by Mozilla.
Which software versions are affected by REDHAT-BUG-2343748?
REDHAT-BUG-2343748 affects Mozilla Firefox versions earlier than 135, Firefox ESR versions earlier than 128.7, and Thunderbird versions earlier than 135 and 128.7.
What potential risks does REDHAT-BUG-2343748 pose to users?
REDHAT-BUG-2343748 poses risks of memory corruption that could allow attackers to execute arbitrary code on affected systems.
Are there any workarounds for REDHAT-BUG-2343748?
There are no recommended workarounds for REDHAT-BUG-2343748; the best course of action is to apply the necessary updates.
- agent/source
- agent/severity
- agent/first-publish-date
- agent/description
- agent/type
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-1017
- agent/references
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/mozilla
- canonical/firefox
- canonical/firefox esr
- canonical/thunderbird