Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-3031

Опубликовано: 01 апр. 2025
Источник: redhat
CVSS3: 5.5
EPSS Низкий

Описание

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137.

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function.

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6firefoxOut of support scope
Red Hat Enterprise Linux 6thunderbirdOut of support scope
Red Hat Enterprise Linux 7firefoxFix deferred
Red Hat Enterprise Linux 7thunderbirdOut of support scope
Red Hat Enterprise Linux 8firefoxFix deferred
Red Hat Enterprise Linux 8thunderbirdFix deferred
Red Hat Enterprise Linux 9firefoxFix deferred
Red Hat Enterprise Linux 9firefox-flatpak-containerFix deferred
Red Hat Enterprise Linux 9thunderbirdFix deferred
Red Hat Enterprise Linux 9thunderbird-flatpak-containerFix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-203
https://bugzilla.redhat.com/show_bug.cgi?id=2356560firefox: thunderbird: JIT optimization bug with different stack slot sizes

EPSS

Процентиль: 12%
0.0004
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
3 месяца назад

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 6.5
nvd
3 месяца назад

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137.

CVSS3: 6.5
debian
3 месяца назад

An attacker could read 32 bits of values spilled onto the stack in a J ...

CVSS3: 6.5
github
3 месяца назад

An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. This vulnerability affects Firefox < 137 and Thunderbird < 137.

EPSS

Процентиль: 12%
0.0004
Низкий

5.5 Medium

CVSS3

Уязвимость CVE-2025-3031