Use-after-free during concurrent delazification
Published Feb 4, 2025
9.8
CRITICALCVSS 3.1
EPSS 0.45%
Description
A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Affected products
No data.
- < 115.20.0
- < 135.0
- ≥ 128.1.0 · < 128.7.0
- < 135.0
- ≥ 128.0.1 · < 128.7.0
No data.
Red Hat Enterprise Linux 7 Extended Lifecycle Support
firefox-0:128.7.0-1.el7_9
Fixed · RHSA-2025:1132
Red Hat Enterprise Linux 8
firefox-0:128.7.0-1.el8_10
Fixed · RHSA-2025:1283
Red Hat Enterprise Linux 8
thunderbird-0:128.7.0-1.el8_10
Fixed · RHSA-2025:1292
Red Hat Enterprise Linux 8.2 Advanced Update Support
firefox-0:128.7.0-1.el8_2
Fixed · RHSA-2025:1133
Red Hat Enterprise Linux 8.2 Advanced Update Support
thunderbird-0:128.7.0-1.el8_2
Fixed · RHSA-2025:1348
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
firefox-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1135
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
firefox-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1135
Red Hat Enterprise Linux 8.4 Telecommunications Update Service
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
firefox-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1135
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el8_4
Fixed · RHSA-2025:1339
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
firefox-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1136
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
firefox-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1136
Red Hat Enterprise Linux 8.6 Telecommunications Update Service
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
firefox-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1136
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el8_6
Fixed · RHSA-2025:1341
Red Hat Enterprise Linux 8.8 Extended Update Support
firefox-0:128.7.0-1.el8_8
Fixed · RHSA-2025:1137
Red Hat Enterprise Linux 8.8 Extended Update Support
thunderbird-0:128.7.0-1.el8_8
Fixed · RHSA-2025:1340
Red Hat Enterprise Linux 9
firefox-0:128.7.0-1.el9_5
Fixed · RHSA-2025:1066
Red Hat Enterprise Linux 9
thunderbird-0:128.7.0-1.el9_5
Fixed · RHSA-2025:1184
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
firefox-0:128.7.0-1.el9_0
Fixed · RHSA-2025:1138
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
thunderbird-0:128.7.0-1.el9_0
Fixed · RHSA-2025:1319
Red Hat Enterprise Linux 9.2 Extended Update Support
firefox-0:128.7.0-1.el9_2
Fixed · RHSA-2025:1139
Red Hat Enterprise Linux 9.2 Extended Update Support
thunderbird-0:128.7.0-1.el9_2
Fixed · RHSA-2025:1317
Red Hat Enterprise Linux 9.4 Extended Update Support
firefox-0:128.7.0-1.el9_4
Fixed · RHSA-2025:1140
Red Hat Enterprise Linux 9.4 Extended Update Support
thunderbird-0:128.7.0-1.el9_4
Fixed · RHSA-2025:1318
Red Hat Enterprise Linux 10
firefox
Affected
Red Hat Enterprise Linux 10
firefox-flatpak-container
Affected
Red Hat Enterprise Linux 10
thunderbird
Affected
Red Hat Enterprise Linux 10
thunderbird-flatpak-container
Affected
Red Hat Enterprise Linux 6
firefox
Out of support scope
Red Hat Enterprise Linux 6
thunderbird
Out of support scope
Red Hat Enterprise Linux 7
thunderbird
Out of support scope
Red Hat Enterprise Linux 9
firefox-flatpak-container
Affected
Red Hat Enterprise Linux 9
thunderbird-flatpak-container
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | firefox-0:128.7.0-1.el7_9 | Fixed | RHSA-2025:1132 |
| Red Hat Enterprise Linux 8 | firefox-0:128.7.0-1.el8_10 | Fixed | RHSA-2025:1283 |
| Red Hat Enterprise Linux 8 | thunderbird-0:128.7.0-1.el8_10 | Fixed | RHSA-2025:1292 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | firefox-0:128.7.0-1.el8_2 | Fixed | RHSA-2025:1133 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | thunderbird-0:128.7.0-1.el8_2 | Fixed | RHSA-2025:1348 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | firefox-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1135 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | firefox-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1135 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | firefox-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1135 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el8_4 | Fixed | RHSA-2025:1339 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | firefox-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1136 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | firefox-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1136 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | firefox-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1136 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el8_6 | Fixed | RHSA-2025:1341 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | firefox-0:128.7.0-1.el8_8 | Fixed | RHSA-2025:1137 |
| Red Hat Enterprise Linux 8.8 Extended Update Support | thunderbird-0:128.7.0-1.el8_8 | Fixed | RHSA-2025:1340 |
| Red Hat Enterprise Linux 9 | firefox-0:128.7.0-1.el9_5 | Fixed | RHSA-2025:1066 |
| Red Hat Enterprise Linux 9 | thunderbird-0:128.7.0-1.el9_5 | Fixed | RHSA-2025:1184 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | firefox-0:128.7.0-1.el9_0 | Fixed | RHSA-2025:1138 |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | thunderbird-0:128.7.0-1.el9_0 | Fixed | RHSA-2025:1319 |
| Red Hat Enterprise Linux 9.2 Extended Update Support | firefox-0:128.7.0-1.el9_2 | Fixed | RHSA-2025:1139 |
| Red Hat Enterprise Linux 9.2 Extended Update Support | thunderbird-0:128.7.0-1.el9_2 | Fixed | RHSA-2025:1317 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | firefox-0:128.7.0-1.el9_4 | Fixed | RHSA-2025:1140 |
| Red Hat Enterprise Linux 9.4 Extended Update Support | thunderbird-0:128.7.0-1.el9_4 | Fixed | RHSA-2025:1318 |
| Red Hat Enterprise Linux 10 | firefox | Affected | n/a |
| Red Hat Enterprise Linux 10 | firefox-flatpak-container | Affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird | Affected | n/a |
| Red Hat Enterprise Linux 10 | thunderbird-flatpak-container | Affected | n/a |
| Red Hat Enterprise Linux 6 | firefox | Out of support scope | n/a |
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | n/a |
| Red Hat Enterprise Linux 9 | firefox-flatpak-container | Affected | n/a |
| Red Hat Enterprise Linux 9 | thunderbird-flatpak-container | Affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
2 other sources (CISA ADP, Red Hat) ▾
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
YesTechnical Impact
TotalDecision
n/aAssessed Feb 5, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2025–2026- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (4 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.45% (0.00452) | 36.99th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.42% (0.00418) | 33.15th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.12% (0.00119) | 28.38th | v4 (v2025.03.14) |
| Feb 5, 2025 | 0.04% (0.00044) | 12.42th | v3 (v2023.03.01) |
References (12)
- https://access.redhat.com/security/cve/CVE-2025-1012 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1939710 Permissions Required
- https://bugzilla.redhat.com/show_bug.cgi?id=2343765 Issue Tracking
- https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html
- https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html
- https://nvd.nist.gov/vuln/detail/CVE-2025-1012
- https://www.cve.org/CVERecord?id=CVE-2025-1012
- https://www.mozilla.org/security/advisories/mfsa2025-07/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-08/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-09/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-10/ Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2025-11/ Vendor Advisory
Change history (0)
No recorded changes yet.