In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade thunderbird | Apr 2, 2025 | Jan 3, 2025 |
| Debian | — | Upgrade thunderbirdUpgrade firefox-esrUpgrade webkit2gtk | Mar 10, 2025 | Jan 2, 2025 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin.Upgrade dev-lang/spidermonkey.Upgrade www-client/firefox-bin. | May 13, 2025 | Jan 3, 2025 |
| Mfsa2025 01 | — | Upgrade to Mozilla Firefox version 134.0 | Mar 5, 2025 | Jan 3, 2025 |
| Mfsa2025 15 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 115.21 | Mar 5, 2025 | Jan 3, 2025 |
| Mfsa2025 16 | — | Upgrade to Mozilla Firefox ESR version 128.8Upgrade to the latest version of Mozilla Firefox | Mar 5, 2025 | Jan 3, 2025 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 128.8 | Mar 5, 2025 | Jan 3, 2025 |
| Suse | — | Upgrade MozillaFirefoxUpgrade libmozjs-128-0Upgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-develUpgrade mozjs128-develUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbirdUpgrade mozjs128Upgrade MozillaFirefox-translations-common | Dec 5, 2025 | Mar 5, 2025 |
| Ubuntu | — | Upgrade thunderbird | Jul 23, 2025 | Jan 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub