CVE-2025-4090
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 29, 2025
Updated: May 9, 2025
CWE ID 119
Summary
CVE-2025-4090 is a vulnerability affecting Thunderbird for Android. The issue allows potentially sensitive library locations to be logged via Logcat. This vulnerability poses a risk, as it could be exploited to expose private information. The affected software versions are Firefox below 138 and Thunderbird below 138. It is recommended that users upgrade to the latest versions to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mozilla Firefox
- Mozilla Thunderbird
Affected Vendors
- Mozilla