MFSA2025-07 Firefox: Security Vulnerabilities fixed in Firefox 135 (CVE-2025-1009)

MFSA2025-07 Firefox: Security Vulnerabilities fixed in Firefox 135 (CVE-2025-1009)

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

02/04/2025

Created

02/05/2025

Added

02/05/2025

Modified

02/10/2025

Description

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

Solution(s)

• mozilla-firefox-upgrade-135_0

References

• https://attackerkb.com/topics/cve-2025-1009
• CVE - 2025-1009
• http://www.mozilla.org/security/announce/2025/mfsa2025-07.html