CVE-2025-9187
Memory safety bugs fixed in Firefox 142 and Thunderbird 142
9.8 CriticalFix available
Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.52%Up 0.5 points since Aug 20, 2025
What each source reports
NVD Score used
Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.
- Record
CVE-2025-9187- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List
Memory safety bugs fixed in Firefox 142 and Thunderbird 142
Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.
- Record
CVE-2025-9187- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2025-25239
Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.
- Record
EUVD-2025-25239- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-6rqq-g95r-qrcc
Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence...
Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 142 and Thunderbird < 142.
- Record
GHSA-6rqq-g95r-qrcc- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-9187
Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.
- Record
UBUNTU-CVE-2025-9187- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15516-1 No score
MozillaFirefox-142.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-142.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15516-1- Updated
- 2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2026:11373-1 No score
firefox-esr-153.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11373-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03008-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
-
Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 (bsc#1248162)
- CVE-2025-9179 (bmo#1979527): Sandbox escape due to invalid pointer in the Audio/Video: GMP component
- CVE-2025-9180 (bmo#1979782): Same-origin policy bypass in the Graphics: Canvas2D component
- CVE-2025-9181 (bmo#1977130): Uninitialized memory in the JavaScript Engine component
- CVE-2025-9182 (bmo#1975837): Denial-of-service due to out-of-memory in the Graphics: WebRender component
- CVE-2025-9183 (bmo#1976102): Spoofing issue in the Address Bar component
- CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163, bmo#1979955): Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
- CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166): Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
- CVE-2025-9187 (bmo#1825621, bmo#1970079, bmo#1976736, bmo#1979072): Memory safety bugs fixed in Firefox 142 and Thunderbird 142
-
Other fixes:
- Ensure the use of the correct file-picker on KDE (bsc#1226112)
- Record
SUSE-SU-2025:03008-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03009-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
-
Firefox Extended Support Release 140.2.0 ESR MFSA 2025-67 (bsc#1248162)
- CVE-2025-9179 (bmo#1979527): Sandbox escape due to invalid pointer in the Audio/Video: GMP component
- CVE-2025-9180 (bmo#1979782): Same-origin policy bypass in the Graphics: Canvas2D component
- CVE-2025-9181 (bmo#1977130): Uninitialized memory in the JavaScript Engine component
- CVE-2025-9182 (bmo#1975837): Denial-of-service due to out-of-memory in the Graphics: WebRender component
- CVE-2025-9183 (bmo#1976102): Spoofing issue in the Address Bar component
- CVE-2025-9184 (bmo#1929482, bmo#1976376, bmo#1979163, bmo#1979955): Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
- CVE-2025-9185 (bmo#1970154, bmo#1976782, bmo#1977166): Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
- CVE-2025-9187 (bmo#1825621, bmo#1970079, bmo#1976736, bmo#1979072): Memory safety bugs fixed in Firefox 142 and Thunderbird 142
-
Other fixes:
- Ensure the use of the correct file-picker on KDE (bsc#1226112)
- Record
SUSE-SU-2025:03009-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:3759-1 No score
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues:
- Move NSS DB password hash away from SHA-1
Update to NSS 3.112.2:
- Prevent leaks during pkcs12 decoding.
- SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
Update to NSS 3.112.1:
- restore support for finding certificates by decoded serial number.
- Record
SUSE-SU-2025:3759-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:3760-1 No score
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues:
- Move NSS DB password hash away from SHA-1.
Update to NSS 3.112.2:
- Prevent leaks during pkcs12 decoding.
- SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
Update to NSS 3.112.1:
- restore support for finding certificates by decoded serial number.
- Record
SUSE-SU-2025:3760-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:3804-1 No score
Security update for mozilla-nss
This update for mozilla-nss fixes the following issues:
- Move NSS DB password hash away from SHA-1
Update to NSS 3.112.2:
- Prevent leaks during pkcs12 decoding.
- SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
Update to NSS 3.112.1:
- restore support for finding certificates by decoded serial number.
- Record
SUSE-SU-2025:3804-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxSUSE:Linux Enterprise Module for Desktop Applications 15 SP6 From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Enterprise Storage 7.1 From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxopenSUSE:Leap 15.6 From an advisory covering 8 CVEs |
before 140.2.0-150200.152.198.1 | 140.2.0-150200.152.198.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 8 CVEs |
before 140.2.0-112.276.1 | 140.2.0-112.276.1 |
MozillaFirefoxSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 8 CVEs |
before 140.2.0-112.276.1 | 140.2.0-112.276.1 |
mozilla-nssSUSE:Linux Enterprise Server 12 SP5-LTSS |
before 3.112.2-58.133.1 | 3.112.2-58.133.1 |
mozilla-nssSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 3.112.2-58.133.1 | 3.112.2-58.133.1 |
mozilla-nssSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 3.112.2-150000.3.132.1 | 3.112.2-150000.3.132.1 |
mozilla-nssSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 3.112.2-150000.3.132.1 | 3.112.2-150000.3.132.1 |
mozilla-nssSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 3.112.2-150000.3.132.1 | 3.112.2-150000.3.132.1 |
mozilla-nssSUSE:Linux Enterprise Micro 5.1 |
before 3.112.2-150000.3.132.1 | 3.112.2-150000.3.132.1 |
mozilla-nssSUSE:Linux Enterprise Micro 5.2 |
before 3.112.2-150000.3.132.1 | 3.112.2-150000.3.132.1 |
mozilla-nssSUSE:Enterprise Storage 7.1 |
before 3.112.2-150000.3.132.1 | 3.112.2-150000.3.132.1 |
mozilla-nssSUSE:Linux Enterprise Micro 5.3 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise Micro 5.4 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise Micro 5.5 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise Module for Basesystem 15 SP6 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise Server 15 SP5-LTSS |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Linux Enterprise Server for SAP Applications 15 SP5 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Manager Proxy LTS 4.3 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssSUSE:Manager Server LTS 4.3 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozilla-nssopenSUSE:Leap 15.6 |
before 3.112.2-150400.3.60.1 | 3.112.2-150400.3.60.1 |
mozjs52Ubuntu:18.04:LTS |
All versions, plus listed versions 52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1 |
None known |
mozjs38Ubuntu:18.04:LTS |
All versions, plus listed versions 38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4 |
None known |
mozjs68Ubuntu:20.04:LTS |
All versions, plus listed versions 68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1 |
None known |
mozjs52Ubuntu:20.04:LTS |
All versions, plus listed versions 52.9.1-1build152.9.1-1ubuntu3 |
None known |
mozjs102Ubuntu:22.04:LTS |
All versions, plus listed versions 102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1 |
None known |
mozjs78Ubuntu:22.04:LTS |
All versions, plus listed versions 78.13.0-178.15.0-278.15.0-4ubuntu1 |
None known |
mozjs91Ubuntu:22.04:LTS |
All versions, plus listed versions 91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1 |
None known |
mozjs102Ubuntu:24.04:LTS |
All versions, plus listed versions 102.15.1-1102.15.1-3ubuntu2 |
None known |
mozjs115Ubuntu:24.04:LTS |
All versions, plus listed versions 115.3.0-0ubuntu1115.4.0-2115.5.0-1115.6.0-1115.7.0-4 Show 4 moreShow less115.8.0-1115.9.0-1115.9.0-1build1115.10.0-1 |
None known |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 9 CVEs |
before 142.0.1-1.1 | 142.0.1-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 228 CVEs |
before 153.0-1.1 | 153.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-9187 is a critical vulnerability (CVSS 9.8) in Mozilla Firefox, published August 19, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. Fixed in mozilla-nss 3.112.2-58.133.1.
References
bugzilla.mozilla.org/buglist.cgi?bug_id=1825621%2C1970079%2C1976736%2C1979072
mozilla.org/security/advisories/mfsa2025-64
nvd.nist.gov/vuln/detail/CVE-2025-9187
github.com/advisories/GHSA-6rqq-g95r-qrcc
suse.com/support/update/announcement/2025/suse-su-202503008-1
Show 194 moreShow less
bugzilla.suse.com/1226112
ubuntu.com/security/CVE-2025-9187
cve.org/CVERecord?id=CVE-2025-9187
This page doesn't list everything
Left out here: 52 references. The JSON record has them.