High WID-SEC-2025-1297 2 CVEs

Mozilla Firefox: Mehrere Schwachstellen ermöglichen Codeausführung

Published Jun 10, 2025 · Updated Jun 10, 2025 · de-DE

Vendor: Mozilla Product: Firefox Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox ausnutzen, um beliebigen Code auszuführen.

Product

Firefox ist ein Open Source Web Browser.

Vulnerabilities 2

Critical 9.8

CVE-2025-49709

Memory corruption in canvas surfaces

Certain canvas operations could have lead to memory corruption. This vulnerability was fixed in Firefox 139.0.4.

Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Wolfi

Jun 11, 2025
Critical 9.8

CVE-2025-49710

Integer overflow in OrderedHashTable

An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This vulnerability was fixed in Firefox 139.0.4.

Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Wolfi

Jun 11, 2025

Revision history

2025-06-10 #1
Initiale Fassung

References

Mozilla Security Advisory MFSA 2025-47 vom 2025-06-10
https://www.mozilla.org/en-US/security/advisories/mfsa2025-47/