CVE-2025-9182
published 2025-08-19CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142…
PriorityP336high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.41%
34.3th percentile
Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 142.0-1 (sid) | firefox 142.0-1 (sid) |
| mozilla | firefox | < 140.2.0 | 140.2.0 |
| mozilla | firefox | < 142.0 | 142.0 |
| mozilla | firefox | — | — |
| mozilla | thunderbird | < 140.2.0 | 140.2.0 |
| mozilla | thunderbird | < 142.0 | 142.0 |
| mozilla | thunderbird | >= 0 < 1:140.7.1+build1-0ubuntu0.22.04.1 | 1:140.7.1+build1-0ubuntu0.22.04.1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2026-02-02
CVE-2025-8031 Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Several security issues were fixed in Thunderbird.
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context,
an attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, bypass security restrictions, cross-site
tracing, or execute arbitrary code.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component
vendor_redhat·2025-08-19·CVSS 7.5
CVE-2025-9182 [HIGH] CWE-400 firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component
firefox: thunderbird: Denial-of-service due to out-of-memory in the Graphics: WebRender component
Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service due to out-of-memory in the Graphics: WebRender component.
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Package: rhel10/firefox-flatpak (Red Hat Enterprise Linux 10) - Not affected
Package: rhel10/thunderbird-flatpak (Red Hat Enterprise Linux 10) - Not affected
Package: firefox (Red Hat Enter
Debian
CVE-2025-9182: firefox - Denial-of-service due to out-of-memory in the Graphics: WebRender component. Thi...
vendor_debian·2025·CVSS 7.5
CVE-2025-9182 [HIGH] CVE-2025-9182: firefox - Denial-of-service due to out-of-memory in the Graphics: WebRender component. Thi...
Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.
Scope: local
sid: resolved (fixed in 142.0-1)
Mozilla
Mozilla Foundation Security Advisory 2025-72: CVE-2025-9182
vendor_mozilla·CVSS 7.5
CVE-2025-9182 [HIGH] Mozilla Foundation Security Advisory 2025-72: CVE-2025-9182
Mozilla Foundation Security Advisory 2025-72
CVE: CVE-2025-9182
Product: Thunderbird
Impact: high
Fixed in: Thunderbird 140.2
Mozilla
Mozilla Foundation Security Advisory 2025-64: CVE-2025-9182
vendor_mozilla·CVSS 7.5
CVE-2025-9182 [HIGH] Mozilla Foundation Security Advisory 2025-64: CVE-2025-9182
Mozilla Foundation Security Advisory 2025-64
CVE: CVE-2025-9182
Product: Firefox
Impact: high
Fixed in: Firefox 142
Mozilla
Mozilla Foundation Security Advisory 2025-70: CVE-2025-9182
vendor_mozilla·CVSS 7.5
CVE-2025-9182 [HIGH] Mozilla Foundation Security Advisory 2025-70: CVE-2025-9182
Mozilla Foundation Security Advisory 2025-70
CVE: CVE-2025-9182
Product: Thunderbird
Impact: high
Fixed in: Thunderbird 142
Mozilla
Mozilla Foundation Security Advisory 2025-67: CVE-2025-9182
vendor_mozilla·CVSS 7.5
CVE-2025-9182 [HIGH] Mozilla Foundation Security Advisory 2025-67: CVE-2025-9182
Mozilla Foundation Security Advisory 2025-67
CVE: CVE-2025-9182
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 140.2
VulDB
Mozilla Thunderbird up to 141 WebRender denial of service (Nessus ID 254415 / WID-SEC-2025-1866)
vuldb·2026-10-01·CVSS 7.5
CVE-2025-9182 [HIGH] Mozilla Thunderbird up to 141 WebRender denial of service (Nessus ID 254415 / WID-SEC-2025-1866)
A vulnerability classified as problematic was found in Mozilla Thunderbird up to 141. Affected by this issue is some unknown functionality of the component WebRender. Such manipulation leads to denial of service.
This vulnerability is traded as CVE-2025-9182. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is advised.
VulDB
Mozilla Firefox up to 141 WebRender denial of service (Nessus ID 254415 / WID-SEC-2025-1866)
vuldb·2026-10-01·CVSS 7.5
CVE-2025-9182 [HIGH] Mozilla Firefox up to 141 WebRender denial of service (Nessus ID 254415 / WID-SEC-2025-1866)
A vulnerability classified as problematic has been found in Mozilla Firefox up to 141. Affected by this vulnerability is an unknown functionality of the component WebRender. This manipulation causes denial of service.
This vulnerability appears as CVE-2025-9182. The attack may be initiated remotely. There is no available exploit.
It is recommended to upgrade the affected component.
OSV
CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics: WebRender component
osv·2025-08-19·CVSS 7.5
CVE-2025-9182 [HIGH] CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics: WebRender component
Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.
GHSA
GHSA-mv5m-p837-6xm9: 'Denial-of-service due to out-of-memory in the Graphics: WebRender component
ghsa_unreviewed·2025-08-19
CVE-2025-9182 [HIGH] CWE-400 GHSA-mv5m-p837-6xm9: 'Denial-of-service due to out-of-memory in the Graphics: WebRender component
'Denial-of-service due to out-of-memory in the Graphics: WebRender component.' This vulnerability affects Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2.
No detection rules found.
No public exploits indexed.
2025-08-19
Published