CVE-2025-14325 is a vulnerability caused by just-in-time (JIT) miscompilation in the JavaScript engine's JIT component of Mozilla Firefox. This vulnerability was assigned a CVSS v3.1 score of 7.3, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. Mozilla fixed this issue in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6. The vendor advisory references Bug 1998050 for technical details. The vulnerability is one among multiple high-impact security issues addressed in the same update.

Successful exploitation of this JIT miscompilation vulnerability could allow an attacker to compromise confidentiality, integrity, and availability of the affected software. The CVSS score of 7.3 reflects a high-impact vulnerability exploitable remotely without authentication or user interaction. However, no known exploits in the wild have been reported as of the advisory date.

Mozilla has released official fixes for this vulnerability in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6. Users and administrators should update to these versions or later to remediate the vulnerability. Since this is not a cloud service, patching the client software is necessary. There are no vendor advisories indicating that no action is required or that the issue is already mitigated without patching.