This Red Hat security advisory addresses nine distinct vulnerabilities in Mozilla Firefox, including CVE-2025-13012 (race condition in Graphics), CVE-2025-13013 and CVE-2025-13018 (mitigation bypasses in DOM components), CVE-2025-13014 and CVE-2025-13020 (use-after-free in Audio/Video and WebRTC components), CVE-2025-13015 (spoofing), CVE-2025-13016 (incorrect boundary conditions in JavaScript WebAssembly), CVE-2025-13017 and CVE-2025-13019 (same-origin policy bypasses in DOM Workers and Notifications). Red Hat has issued updated Firefox packages for Red Hat Enterprise Linux 8 across multiple architectures including x86_64, s390x, ppc64le, and aarch64. The advisory references fixes tracked in Red Hat Bugzilla and provides links to updated packages. No CVSS scores are provided in the advisory, but the overall impact is rated as Important by Red Hat Product Security.

The vulnerabilities collectively impact the security model of Firefox by allowing potential mitigation bypasses, same-origin policy bypasses, use-after-free memory corruption, race conditions, and spoofing attacks. These issues could enable attackers to execute unauthorized actions, compromise user data confidentiality or integrity, or cause application instability. The advisory does not report known exploits in the wild at the time of publication.

Red Hat has released updated Firefox packages that address all listed vulnerabilities. Users of Red Hat Enterprise Linux 8 should apply the Firefox update as provided in advisory RHSA-2025:22363 to remediate these issues. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigations or workarounds are specified or required beyond applying the official update.