CoreCVE
Back

CRITICAL

Large branch table could lead to truncated instruction

Published Jul 22, 2025

Description

On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

Affected products

Remediation

Red Hat statement

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Weaknesses (1)

CWE-1332

References (16)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mozilla
Published Jul 22, 2025
Updated Jul 29, 2026
Reserved Jul 22, 2025
Link CVE-2025-8028

CISA Vulnrichment

Updated Jul 23, 2025

NVD

Status Modified
Modified Oct 5, 2026
Link CVE-2025-8028

Red Hat

Severity Important
Public date Jul 22, 2025
Bugzilla 2382701
Link CVE-2025-8028

ENISA EUVD

Assigner mozilla
Published Jul 22, 2025
Updated Jul 29, 2026
Link EUVD-2025-22371

GitHub

No data