CVE-2025-0241 is a high-severity memory corruption vulnerability in Mozilla Firefox and Thunderbird products involving JavaScript text segmentation. The vulnerability arises when specially crafted text is segmented, leading to memory corruption and a potentially exploitable crash. This issue was addressed and fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6. The vulnerability is tracked under CWE-401 (improper release of memory before removing last reference). The CVSS v3.1 base score is 7.7, reflecting network attack vector, high complexity, no privileges required, no user interaction, and high impact on confidentiality and integrity with low impact on availability. The vendor advisory explicitly states the fix availability and does not indicate any ongoing exploitation.

Successful exploitation of this vulnerability could lead to memory corruption resulting in a crash of the Firefox or Thunderbird application. Given the nature of the memory corruption, there is potential for exploitation to achieve arbitrary code execution or other impacts on confidentiality and integrity. However, no known exploits in the wild have been reported. The impact is rated high based on the CVSS score and vendor advisory.

An official fix is available and has been released by Mozilla in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6. Users and administrators should update affected products to these versions or later to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.