Use-after-free in Custom Highlight
Published Feb 4, 2025
9.8
CRITICALCVSS 3.1
EPSS 0.46%
Description
An attacker could have caused a use-after-free via the Custom Highlight API, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Affected products
No data.
- < 115.20.0
- < 135.0
- ≥ 128.1.0 · < 128.7.0
- ≥ 128.0.1 · < 128.7.0
- ≥ 131.0 · < 135.0
No data.
Red Hat Enterprise Linux 7 Extended Lifecycle Support
firefox-0:128.7.0-1.el7_9
Fixed · RHSA-2025:1132
Red Hat Enterprise Linux 8
firefox-0:128.7.0-1.el8_10
Fixed · RHSA-2025:1283
Red Hat Enterprise Linux 8
thunderbird-0:128.7.0-1.el8_10
Fixed · RHSA-2025:1292
Red Hat Enterprise Linux 8.2 Advanced Update Support
firefox-0:128.7.0-1.el8_2
Fixed · RHSA-2025:1133
Red Hat Enterprise Linux 8.2 Advanced Update Support
thunderbird-0:128.7.0-1.el8_2
Fixed · RHSA-2025:1348
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
firefox-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1135
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
firefox-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1135
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
firefox-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1135
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
firefox-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1136
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
firefox-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1136
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
firefox-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1136
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.8 Extended Update Support
firefox-0:128.7.0-1.el8_8
Fixed · RHSA-2025:1137
Red Hat Enterprise Linux 8.8 Extended Update Support
thunderbird-0:128.7.0-1.el8_8
Fixed · RHSA-2025:1340
Red Hat Enterprise Linux 9
firefox-0:128.7.0-1.el9_5
Fixed · RHSA-2025:1066
Red Hat Enterprise Linux 9
thunderbird-0:128.7.0-1.el9_5
Fixed · RHSA-2025:1184
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
firefox-0:128.7.0-1.el9_0
Fixed · RHSA-2025:1138
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el9_0
Fixed · RHSA-2025:1319
Red Hat Enterprise Linux 9.2 Extended Update Support
firefox-0:128.7.0-1.el9_2
Fixed · RHSA-2025:1139
Red Hat Enterprise Linux 9.2 Extended Update Support
thunderbird-0:128.7.0-1.el9_2
Fixed · RHSA-2025:1317
Red Hat Enterprise Linux 9.4 Extended Update Support
firefox-0:128.7.0-1.el9_4
Fixed · RHSA-2025:1140
Red Hat Enterprise Linux 9.4 Extended Update Support
thunderbird-0:128.7.0-1.el9_4
Fixed · RHSA-2025:1318
Red Hat Enterprise Linux 10
firefox
Affected
Red Hat Enterprise Linux 10
firefox-flatpak-container
Affected
Red Hat Enterprise Linux 10
thunderbird
Affected
Red Hat Enterprise Linux 10
thunderbird-flatpak-container
Affected
Red Hat Enterprise Linux 6
firefox
Out of support scope
Red Hat Enterprise Linux 6
thunderbird
Out of support scope
Red Hat Enterprise Linux 7
thunderbird
Out of support scope
Red Hat Enterprise Linux 9
firefox-flatpak-container
Affected
Red Hat Enterprise Linux 9
thunderbird-flatpak-container
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | firefox-0:128.7.0-1.el7_9 | Fixed | RHSA-2025:1132 |
| Red Hat Enterprise Linux 8 | firefox-0:128.7.0-1.el8_10 | Fixed | RHSA-2025:1283 |
| Red Hat Enterprise Linux 8 | thunderbird-0:128.7.0-1.el8_10 | Fixed | RHSA-2025:1292 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | firefox-0:128.7.0-1.el8_2 | Fixed | RHSA-2025:1133 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | thunderbird-0:128.7.0-1.el8_2 | Fixed | RHSA-2025:1348 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | firefox-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1135 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | firefox-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1135 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | firefox-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1135 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | firefox-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1136 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | firefox-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1136 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | firefox-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1136 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | firefox-0:128.7.0-1.el8_8 | Fixed | RHSA-2025:1137 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | thunderbird-0:128.7.0-1.el8_8 | Fixed | RHSA-2025:1340 |
| Red Hat Enterprise Linux 9 | firefox-0:128.7.0-1.el9_5 | Fixed | RHSA-2025:1066 |
| Red Hat Enterprise Linux 9 | thunderbird-0:128.7.0-1.el9_5 | Fixed | RHSA-2025:1184 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | firefox-0:128.7.0-1.el9_0 | Fixed | RHSA-2025:1138 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el9_0 | Fixed | RHSA-2025:1319 |
| Red Hat Enterprise Linux 9.2 Extended Update Support | firefox-0:128.7.0-1.el9_2 | Fixed | RHSA-2025:1139 |
| Red Hat Enterprise Linux 9.2 Extended Update Support | thunderbird-0:128.7.0-1.el9_2 | Fixed | RHSA-2025:1317 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | firefox-0:128.7.0-1.el9_4 | Fixed | RHSA-2025:1140 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | thunderbird-0:128.7.0-1.el9_4 | Fixed | RHSA-2025:1318 |
| Red Hat Enterprise Linux 10 | firefox | Affected | n/a |
| Red Hat Enterprise Linux 10 | firefox-flatpak-container | Affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird | Affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird-flatpak-container | Affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Out of support scope | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 9 | firefox-flatpak-container | Affected | n/a |
| Red Hat Enterprise Linux 9 | thunderbird-flatpak-container | Affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
References (12)
- https://access.redhat.com/security/cve/CVE-2025-1010 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1936982 Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2343750 Issue Tracking
- https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html
- https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-1010
- https://www.cve.org/CVERecord?id=CVE-2025-1010
- https://www.mozilla.org/security/advisories/mfsa2025-07/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-08/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-09/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-10/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-11/ Vendor Advisory
Change history (0)
No recorded changes yet.