CVE-2025-3608
published 2025-04-15CVE-2025-3608: A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This…
PriorityP335medium6.5CVSS 3.1
AVNACHPRNUINSUCHILAN
EPSS
0.30%
22.5th percentile
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability was fixed in Firefox 137.0.2.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 137.0.2-1 (sid) | firefox 137.0.2-1 (sid) |
| mozilla | firefox | < 137.0.2 | 137.0.2 |
| mozilla | firefox | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6rrc-vwrv-cwxc: A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable conditi
ghsa_unreviewed·2025-04-15
CVE-2025-3608 [MEDIUM] CWE-362 GHSA-6rrc-vwrv-cwxc: A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable conditi
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability affects Firefox < 137.0.2.
OSV
CVE-2025-3608: A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable conditi
osv·2025-04-15·CVSS 6.5
CVE-2025-3608 [MEDIUM] CVE-2025-3608: A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable conditi
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability affects Firefox < 137.0.2.
Red Hat
firefox: Race condition in nsHttpTransaction could lead to memory corruption
vendor_redhat·2025-04-15·CVSS 6.5
CVE-2025-3608 [MEDIUM] CWE-364 firefox: Race condition in nsHttpTransaction could lead to memory corruption
firefox: Race condition in nsHttpTransaction could lead to memory corruption
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability affects Firefox < 137.0.2.
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory: A race condition exists in nsHttpTransaction that can be exploited to cause memory corruption, leading to an exploitable condition.
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Package: firefox (Red Hat Enterprise Linux 10) - Not affected
Package: firefox-flatpak-container (Red Hat Enterprise Linux 10) - Not affected
Package: firefox (Red Hat Enterprise Linux
Debian
CVE-2025-3608: firefox - A race condition existed in nsHttpTransaction that could have been exploited to ...
vendor_debian·2025·CVSS 6.5
CVE-2025-3608 [MEDIUM] CVE-2025-3608: firefox - A race condition existed in nsHttpTransaction that could have been exploited to ...
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability affects Firefox < 137.0.2.
Scope: local
sid: resolved (fixed in 137.0.2-1)
Mozilla
Mozilla Foundation Security Advisory 2025-25: CVE-2025-3608
vendor_mozilla·CVSS 6.5
CVE-2025-3608 [MEDIUM] Mozilla Foundation Security Advisory 2025-25: CVE-2025-3608
Mozilla Foundation Security Advisory 2025-25
CVE: CVE-2025-3608
Product: Firefox
Impact: high
Fixed in: Firefox 137.0.2
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-04-15
Published