CVE-2025-1930 is a use-after-free vulnerability affecting Mozilla Firefox on Windows platforms. It arises when a compromised content process sends malformed StreamData via AudioIPC, causing the Browser process to dereference freed memory. This memory corruption could lead to a sandbox escape, elevating privileges beyond the content process. The vulnerability has a CVSS 3.1 score of 8.8 (high severity) with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. Mozilla fixed this issue in Firefox 136 and corresponding ESR and Thunderbird versions.

Successful exploitation of this vulnerability could allow an attacker controlling a compromised content process to execute code in the Browser process context, potentially escaping the sandbox protections. This could lead to full compromise of the browser environment, including access to sensitive data and execution of arbitrary code with elevated privileges. However, no exploits in the wild have been reported so far.

This vulnerability has been fixed by Mozilla in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. Users and administrators should update to these versions or later to remediate the issue. Patch status is confirmed by the vendor advisories. No additional mitigation actions are required beyond applying the official updates.