CVE-2025-14332 — Out-of-bounds Write in Mozilla Firefox

CWE-787 — Out-of-bounds Write9 documents8 sources
Severity
7.3HIGHNVD
EPSS
0.1%
top 78.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla FirefoxMozilla Thunderbird
Timeline
PublishedDec 9

Description

Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146 and Thunderbird 146.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 3.9 | Impact: 3.4

Affected Packages2 packages

▶NVDmozilla/firefox< 146.0
▶NVDmozilla/thunderbird< 146.0

🔴Vulnerability Details

3
GHSA
GHSA-2ghp-fh92-8w9r: Memory safety bugs present in Firefox 145 and Thunderbird 145↗2025-12-09
▶
CVEList
Memory safety bugs fixed in Firefox 146 and Thunderbird 146↗2025-12-09
▶
OSV
CVE-2025-14332: Memory safety bugs present in Firefox 145 and Thunderbird 145↗2025-12-09
▶

📋Vendor Advisories

4
Red Hat
firefox: Memory safety bugs fixed in Firefox 146 and Thunderbird 146↗2025-12-09
▶
Debian
CVE-2025-14332: firefox - Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bug...↗2025
▶
Mozilla
Mozilla Foundation Security Advisory 2025-95: CVE-2025-14332↗
▶
Mozilla
Mozilla Foundation Security Advisory 2025-92: CVE-2025-14332↗
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-14332 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-14332 — Out-of-bounds Write in Mozilla Firefox | cvebase