Red Hat Product Security issued an advisory (RHSA-2025:21280) for Mozilla Firefox on Red Hat Enterprise Linux 9 addressing nine security vulnerabilities (CVE-2025-13012 through CVE-2025-13020). The vulnerabilities include a race condition in the Graphics component (CVE-2025-13012), multiple mitigation bypasses in DOM components, use-after-free bugs in Audio/Video and WebRTC components, same-origin policy bypasses in DOM Workers and Notifications components, an incorrect boundary condition in JavaScript WebAssembly, and a spoofing issue. These vulnerabilities affect Firefox as packaged for various Red Hat Enterprise Linux 9 architectures and variants. The advisory provides updated Firefox packages to fix these issues.

The vulnerabilities impact the security of Firefox by potentially allowing bypasses of security mitigations, use-after-free conditions that could lead to memory corruption, same-origin policy bypasses that could allow unauthorized access to web content, race conditions that could cause unpredictable behavior, and spoofing that could mislead users. These issues collectively pose a high security risk to users running affected Firefox versions on Red Hat Enterprise Linux 9, potentially enabling attackers to compromise browser security and user data.

Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 9 that address these vulnerabilities. Users should apply the security update as detailed in the Red Hat advisory RHSA-2025:21280 and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. Since this is an official fix, applying the update is the recommended mitigation. No additional vendor guidance indicates other mitigations or that no action is required.