CVE-2025-4920
An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object....
Duplicate of CVE-2025-4918
What each source reports
CVE List No score
Duplicate of CVE-2025-4918
- Record
CVE-2025-4920- Updated
- 2026-11-02
EUVDEUVD-2025-15601 No score
Duplicate of CVE-2025-4918
- Record
EUVD-2025-15601- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-872r-h2cj-j272 No score
An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object....
An attacker was able to perform an out-of-bounds read or write on a JavaScript Promise object. This vulnerability affects Firefox < 138.0.4 and Firefox ESR < 128.10.1.
- Record
GHSA-872r-h2cj-j272- Updated
- 2026-11-02
NVD No score
Rejected reason: Duplicate of CVE-2025-4918
- Record
CVE-2025-4920- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15172-1 No score
libmozjs-128-0-128.10.1-1.1 on GA media
These are all security issues fixed in the libmozjs-128-0-128.10.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15172-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mozjs128openSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 128.10.1-1.1 | 128.10.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-4920 has been rejected by its source and should not be treated as a live vulnerability, published May 17, 2025.