CVE-2025-1011

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Feb 4, 2025
Updated: Feb 6, 2025
CWE ID 94

Summary

CVE-2025-1011 is a vulnerability in the WebAssembly code generation process that could potentially lead to a crash. Malicious actors may have exploited this issue to gain code execution in affected systems. This vulnerability poses a risk to Firefox versions below 135, Firefox ESR below 128.7, Thunderbird versions below 128.7, and Thunderbird versions below 135. Users are strongly advised to update their browsers to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Mozilla Firefox
  • Mozilla Thunderbird

Affected Vendors

  • Mozilla