CVE-2025-13014 is a use-after-free vulnerability classified under CWE-416 affecting the Audio/Video component of Mozilla Firefox. This vulnerability allows for potential memory corruption, which could be leveraged to execute arbitrary code or cause denial of service. It was fixed in Firefox 145 and Firefox ESR 140.5 releases, as well as Thunderbird 145 and 140.5. The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The Mozilla security advisories mfsa2025-87 and mfsa2025-88 provide detailed information and confirm the fixes.

The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service by exploiting a use-after-free condition in the Audio/Video component. The high CVSS score (8.8) reflects the potential for significant impact on system confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.

Official fixes are available and have been released by Mozilla in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5. Users and administrators should update to these versions or later to remediate this vulnerability. No additional mitigation actions are required beyond applying the official patches.