Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-1932

Опубликовано: 04 мар. 2025
Источник: redhat
CVSS3: 8.3
EPSS Низкий

Описание

An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability affects Firefox < 136, Firefox ESR < 128.8, Thunderbird < 136, and Thunderbird < 128.8.

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access.

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10firefoxAffected
Red Hat Enterprise Linux 10firefox-flatpak-containerAffected
Red Hat Enterprise Linux 6firefoxOut of support scope
Red Hat Enterprise Linux 9firefox-flatpak-containerAffected
Red Hat Enterprise Linux 7 Extended Lifecycle SupportfirefoxFixedRHSA-2025:269913.03.2025
Red Hat Enterprise Linux 8firefoxFixedRHSA-2025:245206.03.2025
Red Hat Enterprise Linux 8.2 Advanced Update SupportfirefoxFixedRHSA-2025:270813.03.2025
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportfirefoxFixedRHSA-2025:248410.03.2025
Red Hat Enterprise Linux 8.4 Telecommunications Update ServicefirefoxFixedRHSA-2025:248410.03.2025
Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsfirefoxFixedRHSA-2025:248410.03.2025

Показывать по

Дополнительная информация

Статус:

Important
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2349796firefox: Inconsistent comparator in XSLT sorting led to out-of-bounds access

EPSS

Процентиль: 22%
0.00071
Низкий

8.3 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
ubuntu
4 месяца назад

An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability affects Firefox < 136, Firefox ESR < 128.8, Thunderbird < 136, and Thunderbird < 128.8.

CVSS3: 8.1
nvd
4 месяца назад

An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability affects Firefox < 136, Firefox ESR < 128.8, Thunderbird < 136, and Thunderbird < 128.8.

CVSS3: 8.1
debian
4 месяца назад

An inconsistent comparator in xslt/txNodeSorter could have resulted in ...

CVSS3: 9.8
github
4 месяца назад

An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability affects Firefox < 136 and Firefox ESR < 128.8.

CVSS3: 9.8
fstec
4 месяца назад

Уязвимость компонента xslt/txNodeSorter браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, Thunderbird ESR, позволяющая нарушителю оказать влияние на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 22%
0.00071
Низкий

8.3 High

CVSS3