CVE-2025-1930 is a use-after-free vulnerability affecting Mozilla Firefox on Windows platforms. It occurs when a compromised content process sends malformed StreamData via AudioIPC, causing the Browser process to dereference freed memory. This memory safety issue could lead to sandbox escape, elevating privileges beyond the content process. The vulnerability is tracked under CWE-416 and has a CVSS 3.1 base score of 8.8 (high severity) with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. Mozilla addressed this vulnerability in Firefox 136 and corresponding ESR and Thunderbird versions.

Successful exploitation of this vulnerability could allow an attacker controlling a compromised content process to escape the browser sandbox on Windows, potentially leading to arbitrary code execution with elevated privileges. This elevates the risk of system compromise beyond the browser context. No known exploits in the wild have been reported at the time of disclosure.

This vulnerability has been fixed by Mozilla in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. Users and administrators should update to these versions or later to remediate the issue. Since official fixes are available, applying these updates is the recommended and effective mitigation. Patch status is confirmed by Mozilla advisories linked in the vendor advisory content.