CVE-2025-13024 is a critical security vulnerability caused by a Just-In-Time (JIT) miscompilation bug in the JavaScript engine's JIT component of Mozilla Firefox. This flaw could potentially allow attackers to compromise system confidentiality, integrity, and availability. The issue was identified and fixed in Firefox 145 and Thunderbird 145 as part of a broader set of memory safety fixes. The vulnerability is tracked under CWE-733 (Improper Control of Generation of Code). Mozilla's official advisories (MFSA2025-87 and MFSA2025-90) provide detailed information and confirm the fix in these versions.

The vulnerability has a CVSS 3.1 base score of 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. Exploitation could allow arbitrary code execution or other severe consequences. However, no known exploits in the wild have been reported. The flaw affects Firefox versions prior to 145 and Thunderbird versions prior to 145.

Mozilla has released official fixes for this vulnerability in Firefox 145 and Thunderbird 145. Users and administrators should update to these versions or later to remediate the issue. Since this is not a cloud service, remediation depends on applying these updates. No additional mitigation steps are indicated by the vendor advisory.