CoreCVE
Back

HIGH

A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC

Published May 27, 2025

Description

A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 139 and Thunderbird < 128.11.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-415

References (3)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mozilla
Published May 27, 2025
Updated Aug 25, 2025
Reserved May 27, 2025
Link CVE-2025-5262
CISA Vulnrichment
Updated May 27, 2025
NVD
Status Analyzed
Modified Jun 17, 2026
Link CVE-2025-5262
Red Hat
Severity n/a
Public date n/a
Links CVE-2025-5262