CVE-2025-1934

The RegExp component in Mozilla Firefox , Firefox ESR , and Thunderbird is vulnerable to an issue where processing of a RegExp bailout can be interrupted. This allows an attacker to run additional JavaScript, which could potentially trigger garbage collection at an unexpected time. This flaw coul...

mozilla -- memory corruption

[email protected] reports: CVE-2025-1938: Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrar...