Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-0240

Опубликовано: 07 янв. 2025
Источник: nvd
CVSS3: 4
EPSS Низкий

Описание

Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

EPSS

Процентиль: 9%
0.00036
Низкий

4 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 4
ubuntu
5 месяцев назад

Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

CVSS3: 6.5
redhat
5 месяцев назад

Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox < 134, Firefox ESR < 128.6, Thunderbird < 134, and Thunderbird < 128.6.

CVSS3: 4
debian
5 месяцев назад

Parsing a JavaScript module as JSON could, under some circumstances, c ...

CVSS3: 4
github
5 месяцев назад

Parsing a JavaScript module as JSON could, under some circumstances, cause cross-compartment access, which may result in a use-after-free. This vulnerability affects Firefox < 134 and Firefox ESR < 128.6.

CVSS3: 6.5
fstec
5 месяцев назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтовых клиентов Thunderbird, Thunderbird ESR, связанная с использованием памяти после ее освобождения, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 9%
0.00036
Низкий

4 Medium

CVSS3

Дефекты

CWE-416