The advisory covers five distinct security vulnerabilities affecting Mozilla Firefox and Thunderbird components: CVE-2025-9182 (denial-of-service via out-of-memory in Graphics WebRender), CVE-2025-9179 (sandbox escape due to invalid pointer in Audio/Video GMP), CVE-2025-9180 (same-origin policy bypass in Graphics Canvas2D), CVE-2025-9181 (uninitialized memory in JavaScript Engine), and CVE-2025-9185 (memory safety bugs). These vulnerabilities have been addressed in Firefox ESR versions 115.27, 128.14, 140.2, Thunderbird ESR 128.14, 140.2, and Firefox and Thunderbird version 142. The Red Hat advisory RHSA-2025:15421 provides updated packages for Red Hat Enterprise Linux 9.2 and related distributions. The advisory does not provide CVSS scores but classifies the impact as Important.

The vulnerabilities collectively could allow denial-of-service conditions, sandbox escapes, bypass of same-origin policy, exposure of uninitialized memory, and other memory safety issues in Firefox and Thunderbird. These issues may impact the security boundaries and stability of the affected applications. The advisory does not report known exploits in the wild. The impact is rated as Important by Red Hat Product Security.

Red Hat has released updated Firefox and Thunderbird packages for Red Hat Enterprise Linux 9.2 and related variants that fix these vulnerabilities. Users should apply these official updates as provided in advisory RHSA-2025:15421. The vendor manages remediation through these patches; no additional mitigation steps are specified or required beyond applying the updates.