CVE-2025-13027 describes memory safety bugs in Firefox 144 and Thunderbird 144 that showed evidence of memory corruption. These bugs could potentially allow an attacker to execute arbitrary code with sufficient effort. The vulnerabilities were resolved in Firefox 145 and Thunderbird 145. The CVSS v3.1 base score is 8.1, indicating high severity, with attack vector network, high attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor advisory confirms the fixes and recommends upgrading to the patched versions.

Successful exploitation of these memory safety bugs could lead to arbitrary code execution, compromising confidentiality, integrity, and availability of the affected systems running Firefox 144 or Thunderbird 144. However, no active exploitation has been observed in the wild. The impact is rated high due to the potential for remote code execution without user interaction or privileges.

Mozilla has released official fixes for this vulnerability in Firefox 145 and Thunderbird 145. Users and administrators should upgrade to these versions or later to remediate the issue. Since this is not a cloud service, remediation depends on applying these updates. Patch status is confirmed by the vendor advisory. No additional mitigation steps are indicated beyond applying the official updates.