cbcvebase.
CVE-2025-8027
published 2025-07-22

CVE-2025-8027: On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This…

PriorityP429medium6.5CVSS 3.1
AVNACLPRNUIRSUCHINAN
EPSS
0.35%
27.4th percentile
On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianfirefox< firefox 141.0-1 (sid)firefox 141.0-1 (sid)
debianfirefox-esr< firefox 141.0-1 (sid)firefox 141.0-1 (sid)
debianthunderbird< firefox 141.0-1 (sid)firefox 141.0-1 (sid)
mozillafirefox< 115.26.0115.26.0
mozillafirefox< 141.0141.0
mozillafirefox
mozillafirefox>= 128.0 < 128.13.0128.13.0
mozillafirefox>= 140.0 < 140.1.0140.1.0
mozillathunderbird< 128.13.0128.13.0
mozillathunderbird< 141.0141.0
mozillathunderbird>= 0 < 1:128.13.0esr-1~deb11u11:128.13.0esr-1~deb11u1
mozillathunderbird>= 0 < 1:128.13.0esr-1~deb12u11:128.13.0esr-1~deb12u1
mozillathunderbird>= 0 < 1:128.13.0esr-11:128.13.0esr-1
mozillathunderbird>= 0 < 1:128.13.0esr-11:128.13.0esr-1
mozillathunderbird>= 140.0 < 140.1.0140.1.0

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.