CVE-2025-3608: Vulnerability in Mozilla Firefox
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability was fixed in Firefox 137.0.2.
AI Analysis
Technical Summary
This vulnerability involves a race condition in the nsHttpTransaction module of Mozilla Firefox, which could lead to memory corruption and create an exploitable condition. The flaw was identified and fixed by the Mozilla Fuzzing Team and resolved in Firefox 137.0.2. The CVSS 3.1 base score is 6.5, with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact.
Potential Impact
Successful exploitation of this race condition could result in memory corruption, potentially allowing an attacker to compromise confidentiality or execute arbitrary code. However, no active exploitation has been reported. The vulnerability affects Firefox users running versions prior to 137.0.2.
Mitigation Recommendations
Users should update to Firefox version 137.0.2 or later, where this vulnerability has been fixed. Applying this official patch fully mitigates the issue. No additional mitigation steps are required beyond updating.
CVE-2025-3608: Vulnerability in Mozilla Firefox
Description
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability was fixed in Firefox 137.0.2.
CVSS v3.1
Score 6.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a race condition in the nsHttpTransaction module of Mozilla Firefox, which could lead to memory corruption and create an exploitable condition. The flaw was identified and fixed by the Mozilla Fuzzing Team and resolved in Firefox 137.0.2. The CVSS 3.1 base score is 6.5, with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact.
Potential Impact
Successful exploitation of this race condition could result in memory corruption, potentially allowing an attacker to compromise confidentiality or execute arbitrary code. However, no active exploitation has been reported. The vulnerability affects Firefox users running versions prior to 137.0.2.
Mitigation Recommendations
Users should update to Firefox version 137.0.2 or later, where this vulnerability has been fixed. Applying this official patch fully mitigates the issue. No additional mitigation steps are required beyond updating.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mozilla
- Date Reserved
- 2025-04-14T20:03:44.238Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 69a0a1c885912abc71d0baa1
Added to database: 2/26/2026, 7:40:56 PM
Last enriched: 4/14/2026, 11:45:17 AM
Last updated: 5/28/2026, 3:50:30 AM
Views: 55
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.