CVE-2025-1934: Unexpected GC during RegExp bailout processing
It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-1934?
CVE-2025-1934 is considered a medium severity vulnerability due to its potential to interrupt RegExp processing and execute unintended JavaScript.
How do I fix CVE-2025-1934?
To fix CVE-2025-1934, update your Mozilla Firefox to version 136 or Mozilla Firefox ESR to version 128.8 or later.
Which versions of Firefox are affected by CVE-2025-1934?
CVE-2025-1934 affects Mozilla Firefox versions prior to 136 and Firefox ESR versions prior to 128.8.
Can CVE-2025-1934 allow arbitrary code execution?
Yes, CVE-2025-1934 can allow the execution of additional JavaScript, which may lead to arbitrary code execution under certain conditions.
What type of attack is CVE-2025-1934 associated with?
CVE-2025-1934 is associated with a potential code execution attack through RegExp bailouts in specific versions of Mozilla Firefox.