CVE-2025-4087

A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Thunderbird < 138, and Thunderbird < 128.10.

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A vulnerability was identified in Firefox where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption.

This update for MozillaFirefox fixes the following issues. Firefox Extended Support Release 128.10.0 ESR MFSA 2025-29. Potential privilege escalation in Firefox Updater WebGL shader attribute memory corruption in Firefox for macOS Process isolation bypass using 'javascript:' URI links in cross-origin frames. Potential local code execution in "copy as cURL" command Unsafe attribute access during XPath parsing. Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10.