An inconsistent comparator in the XSLT sorting implementation (xslt/txNodeSorter) in Mozilla Firefox versions 122 and later could cause out-of-bounds memory access. This memory safety issue could potentially be exploited to impact confidentiality and availability. The vulnerability is tracked as CVE-2025-1932 and was reported by Ivan Fratric of Google Project Zero. It was addressed and fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. The vulnerability is part of a set of memory safety bugs fixed in these releases. The CVSS 3.1 base score is 8.1 (high severity), reflecting the potential impact and ease of exploitation under certain conditions.

Successful exploitation of this vulnerability could lead to out-of-bounds memory access, potentially allowing attackers to read sensitive information or cause denial of service conditions. The CVSS score indicates a high confidentiality impact and high availability impact, but no integrity impact. No confirmed exploits in the wild have been reported at this time.

This vulnerability has been fixed in official Mozilla releases: Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8. Users and administrators should update to these versions or later to mitigate the risk. No additional mitigation actions are required beyond applying these official patches.