REDHAT-BUG-2362912
First published: Tue Apr 29 2025(Updated: )
Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and Thunderbird ESR < 128.10.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox | <138 | |
| Firefox ESR | <128.10 | |
| Thunderbird | <138 | |
| Mozilla Thunderbird | <128.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2025:4443
- https://access.redhat.com/errata/RHSA-2025:4458
- https://access.redhat.com/errata/RHSA-2025:4460
- https://access.redhat.com/errata/RHSA-2025:4753
- https://access.redhat.com/errata/RHSA-2025:4756
- https://access.redhat.com/errata/RHSA-2025:4751
- https://access.redhat.com/errata/RHSA-2025:4752
- https://bugzilla.redhat.com/show_bug.cgi?id=2362912
Frequently Asked Questions
What is the severity of REDHAT-BUG-2362912?
REDHAT-BUG-2362912 has a high severity level due to evidence of memory corruption that could potentially lead to arbitrary code execution.
How do I fix REDHAT-BUG-2362912?
To fix REDHAT-BUG-2362912, users should upgrade to the latest version of Firefox, Firefox ESR, Thunderbird, or Thunderbird ESR that are not affected.
Which versions are affected by REDHAT-BUG-2362912?
REDHAT-BUG-2362912 affects Firefox versions prior to 138, Firefox ESR versions prior to 128.10, Thunderbird versions prior to 138, and Thunderbird ESR versions prior to 128.10.
What types of applications are impacted by REDHAT-BUG-2362912?
REDHAT-BUG-2362912 impacts web browsers and email clients, specifically Mozilla Firefox and Mozilla Thunderbird.
Can REDHAT-BUG-2362912 be exploited remotely?
While REDHAT-BUG-2362912 shows evidence of memory safety issues, exploitation would likely require specific conditions to be met.
- agent/last-modified-date
- agent/source
- agent/references
- agent/severity
- agent/description
- agent/type
- agent/first-publish-date
- agent/event
- agent/guess-ai
- agent/software-canonical-lookup
- agent/tags
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2025-4091
- vendor/mozilla
- canonical/firefox
- canonical/firefox esr
- canonical/thunderbird
- canonical/mozilla thunderbird