CVE-2025-11153 — Code Injection in Mozilla Firefox

CWE-94 — Code Injection5 documents5 sources
Severity
7.5HIGHNVD
EPSS
0.0%
top 89.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedSep 30

Description

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDmozilla/firefox< 143.0.3

🔴Vulnerability Details

2
OSV
CVE-2025-11153: JIT miscompilation in the JavaScript Engine: JIT component↗2025-09-30
▶
CVEList
JIT miscompilation in the JavaScript Engine: JIT component↗2025-09-30
▶

📋Vendor Advisories

2
Debian
CVE-2025-11153: firefox - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability a...↗2025
▶
Mozilla
Mozilla Foundation Security Advisory 2025-80: CVE-2025-11153↗
▶
CVE-2025-11153 — Code Injection in Mozilla Firefox | cvebase