FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Mozilla -- nullptr dereference

Affected packages
firefox < 141.0,2
firefox-esr < 140.1
firefox-esr < 128.13
firefox-esr < 115.26
thunderbird < 141.0
thunderbird-esr < 140.1
thunderbird < 128.13

Details

VuXML ID 4d03efe7-685e-11f0-a12d-b42e991fc52e
Discovery 2025-07-22
Entry 2025-07-24

security@mozilla.org reports:

The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref.

[source]

References

CVE Name CVE-2025-8033
URL https://nvd.nist.gov/vuln/detail/CVE-2025-8033

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.