REDHAT-BUG-2343750: Use After Free
First published: Tue Feb 04 2025(Updated: )
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox | <135 | |
| Mozilla Firefox ESR | <115.20<128.7 | |
| Mozilla Thunderbird | <128.7<135 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2025:1066
- https://access.redhat.com/errata/RHSA-2025:1133
- https://access.redhat.com/errata/RHSA-2025:1135
- https://access.redhat.com/errata/RHSA-2025:1138
- https://access.redhat.com/errata/RHSA-2025:1136
- https://access.redhat.com/errata/RHSA-2025:1132
- https://access.redhat.com/errata/RHSA-2025:1137
- https://access.redhat.com/errata/RHSA-2025:1139
- https://access.redhat.com/errata/RHSA-2025:1140
- https://access.redhat.com/errata/RHSA-2025:1184
- https://access.redhat.com/errata/RHSA-2025:1283
- https://access.redhat.com/errata/RHSA-2025:1292
- https://access.redhat.com/errata/RHSA-2025:1319
- https://access.redhat.com/errata/RHSA-2025:1317
- https://access.redhat.com/errata/RHSA-2025:1318
- https://access.redhat.com/errata/RHSA-2025:1339
- https://access.redhat.com/errata/RHSA-2025:1340
- https://access.redhat.com/errata/RHSA-2025:1341
- https://access.redhat.com/errata/RHSA-2025:1348
- https://bugzilla.redhat.com/show_bug.cgi?id=2343750
Frequently Asked Questions
What is the severity of REDHAT-BUG-2343750?
The severity of REDHAT-BUG-2343750 is classified as potentially exploitable due to a use-after-free vulnerability.
How do I fix REDHAT-BUG-2343750?
To fix REDHAT-BUG-2343750, update to Mozilla Firefox version 135 or later, Firefox ESR version 115.20 or later, or Thunderbird version 128.7 or later.
Which software versions are affected by REDHAT-BUG-2343750?
REDHAT-BUG-2343750 affects Firefox versions below 135, Firefox ESR versions below 115.20 and 128.7, and Thunderbird versions below 128.7 and 135.
What are the potential risks of REDHAT-BUG-2343750?
The potential risks of REDHAT-BUG-2343750 include application crashes and the possibility of remote code execution due to the use-after-free vulnerability.
Is there a workaround for REDHAT-BUG-2343750?
Currently, the best approach is to immediately update the affected software since there are no documented workarounds for REDHAT-BUG-2343750.
- agent/weakness
- agent/source
- agent/severity
- agent/first-publish-date
- agent/description
- agent/type
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/references
- agent/last-modified-date
- agent/tags
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-1010
- vendor/mozilla
- canonical/mozilla firefox
- canonical/mozilla firefox esr
- canonical/mozilla thunderbird