Red Hat Product Security issued an advisory (RHSA-2025:22375) for Mozilla Firefox on Red Hat Enterprise Linux 9.2 addressing nine security vulnerabilities (CVE-2025-13012 through CVE-2025-13020). The vulnerabilities include mitigation bypasses in DOM components, use-after-free bugs in Audio/Video and WebRTC components, incorrect boundary conditions in JavaScript WebAssembly, same-origin policy bypasses in DOM Workers and Notifications components, a race condition in the Graphics component, and a spoofing issue. These issues collectively pose a high security impact. The advisory provides updated Firefox packages to remediate these vulnerabilities. Detailed CVSS scores and exploitation details are referenced on the individual CVE pages. The update applies to multiple architectures including x86_64, ppc64le, aarch64, and s390x.

The vulnerabilities fixed by this update could allow attackers to bypass security mitigations, cause use-after-free conditions potentially leading to memory corruption, bypass same-origin policies, exploit race conditions, or perform spoofing attacks within the Firefox browser. These issues affect core browser components that handle web content rendering, multimedia processing, and security policies, potentially compromising browser security and user data integrity. The advisory rates the overall impact as Important (high severity). There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 9.2 and related variants that address these vulnerabilities. Users and administrators should apply the Firefox update provided by Red Hat as detailed in the advisory (https://access.redhat.com/articles/11258) to remediate these issues. No additional mitigation steps are indicated or required beyond applying the official update.