Critical Security Update for Firefox: Addressing Multiple Memory Safety Vulnerabilities
Summary
ALSA-2025:1066: Important: firefox security update. Affects firefox versions < 128.7.0-1.el9_5. Fixed in 128.7.0-1.el9_5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely used open-source web browser known for its commitment to standards compliance, performance, and portability. It supports various web technologies and is favored for its privacy features. However, like any software, it is susceptible to vulnerabilities that can compromise user security and privacy. The recent security update addresses several critical memory safety issues that could lead to crashes or unauthorized access to sensitive information.
Vulnerability Detail
The vulnerabilities identified in this update include multiple memory safety bugs, use-after-free errors, and improper certificate length checks. These issues stem from flaws in the browser's code that can be exploited by attackers to execute arbitrary code, crash the browser, or access private browsing data. Notably, CVE-2025-1010 and CVE-2025-1012 highlight use-after-free vulnerabilities that can occur during specific operations, potentially allowing attackers to manipulate memory and execute malicious code.
How To Fix
Minimum fixed version
128.7.0-1.el9_5
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for these vulnerabilities. The best course of action is to apply the security update as soon as it is available.
Conclusion
The recent security update for Mozilla Firefox addresses critical vulnerabilities that could compromise user security. It is essential for users to update to the latest version to mitigate risks associated with these vulnerabilities. Regular monitoring and updates are crucial for maintaining software security.
See every vulnerability recorded for firefox →
FAQ
The update addresses multiple memory safety bugs, use-after-free vulnerabilities, and issues with certificate length checks.
You can check your Firefox version by navigating to 'Help' > 'About Firefox'. If your version is below 128.7.0-1.el9_5, you are affected.
While there are no specific workarounds, it is recommended to avoid using sensitive features until the update can be applied.
Detailed information can be found on the CVE pages linked in the security advisory or through the Mozilla security updates page.
Yes, Vulert can monitor your applications for open-source vulnerabilities in real-time using a manifest file like package-lock.json. You can check your application against known vulnerabilities using the Vulert playground.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
