A denial-of-service vulnerability due to out-of-memory issues in the Graphics: WebRender component affects several products. Specifically, this vulnerability impacts Firefox versions prior to 142, Firefox ESR versions prior to 140.2, and Thunderbird versions prior to 142 and 140.2.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2025-9182 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted network requests to the affected applications, leading to a denial-of-service condition by exhausting memory resources. This can be done without requiring any user interaction or elevated privileges.
Affected Products
- Firefox: Versions prior to 142 are affected by this vulnerability, which can lead to service interruptions.
- Firefox ESR: Versions prior to 140.2 are also vulnerable, impacting enterprise users relying on extended support.
- Thunderbird: Versions prior to 142 and 140.2 are affected, which may disrupt email services for users.
Mitigation
Users are advised to update their Firefox and Thunderbird applications to the latest versions to mitigate this vulnerability. Regularly checking for updates and applying them promptly can help protect against potential exploits.