CVE-2025-9185Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox

Severity
8.1HIGHNVD
EPSS
0.1%
top 75.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 19
Latest updateFeb 2

Description

Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9

Affected Packages3 packages

NVDmozilla/firefox128.0128.14.0+3
NVDmozilla/thunderbird140.0140.2.0+2
Debianmozilla/thunderbird< 1:128.14.0esr-1~deb11u1+3

🔴Vulnerability Details

3
CVEList
Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1422025-08-19
OSV
CVE-2025-9185: Memory safety bugs present in Firefox ESR 1152025-08-19
GHSA
GHSA-2hgr-r3c9-m9jw: Memory safety bugs present in Firefox ESR 1152025-08-19

📋Vendor Advisories

11
Ubuntu
Thunderbird vulnerabilities2026-02-02
Red Hat
thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 1422025-08-19
Debian
CVE-2025-9185: firefox - Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbir...2025
Microsoft
Controller/Async/FilesystemManager.php in the filemanager in Bolt allows remote attacke2019-03-12
Mozilla
Mozilla Foundation Security Advisory 2025-71: CVE-2025-9185
CVE-2025-9185 — Mozilla Firefox vulnerability | cvebase