CVE-2025-0238: Use-after-free when breaking lines in text
Assuming a controlled failed memory allocation, an attacker could have caused a use-after-free, leading to a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-0238?
CVE-2025-0238 is classified as a potentially exploitable vulnerability due to its use-after-free condition.
How do I fix CVE-2025-0238?
To remediate CVE-2025-0238, update affected Mozilla products to versions 134.0 or 128.6 and ensure all security patches are applied.
Which software is affected by CVE-2025-0238?
CVE-2025-0238 affects Mozilla Firefox ESR, Mozilla Firefox, and Mozilla Thunderbird versions prior to the specified remedial versions.
What are the potential impacts of CVE-2025-0238?
Exploitation of CVE-2025-0238 may result in application crashes and could allow an attacker to execute arbitrary code.
Can CVE-2025-0238 be exploited remotely?
Yes, CVE-2025-0238 can potentially be exploited remotely through controlled failed memory allocations.