This Red Hat security advisory covers a set of vulnerabilities in Mozilla Firefox and Thunderbird, including a use-after-free in MediaTrackGraphImpl::GetInstance() (CVE-2025-11708), out-of-bounds read/write triggered by WebGL textures (CVE-2025-11709), cross-process information leaks via malicious IPC messages (CVE-2025-11710), modification of non-writable object properties (CVE-2025-11711), and an OBJECT tag type attribute overriding browser behavior without a content-type (CVE-2025-11712). Additional memory safety bugs are addressed in CVE-2025-11714 and CVE-2025-11715. These vulnerabilities are fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144, and Thunderbird 144. The advisory applies to Red Hat Enterprise Linux 9.2 and related distributions. No known exploits in the wild have been reported at the time of publication.

The vulnerabilities include memory safety issues such as use-after-free and out-of-bounds read/write, which can lead to potential crashes or arbitrary code execution. Cross-process information leaks may expose sensitive data between processes. Improper handling of OBJECT tag attributes and modifiable non-writable properties could affect browser behavior and security boundaries. These issues collectively pose a high security risk if exploited.

Red Hat has released updated Firefox packages (version 140.4.0-3.el9_2 and Firefox 144) that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.2 systems should apply the provided security updates promptly. Detailed update instructions are available at https://access.redhat.com/articles/11258. Since this is an official Red Hat advisory with fixes available, applying the vendor-provided patches is the recommended mitigation. No additional mitigations are specified or required beyond applying the update.