Two security vulnerabilities affecting Mozilla Firefox and Thunderbird involve out-of-bounds access errors: one when resolving Promise objects (CVE-2025-4918) and another when optimizing linear sums (CVE-2025-4919). These issues were addressed in a security update provided by Red Hat for their Enterprise Linux 8.8 Extended Update Support and related products. The update is rated as important by Red Hat Product Security. No CVSS score is provided in the advisory. The vulnerabilities relate to improper memory access (CWE-787).

Red Hat Security Advisory: firefox security update

Two security vulnerabilities (CVE-2025-4918 and CVE-2025-4919) affecting Mozilla Firefox and Thunderbird were addressed by Red Hat in an important security update for Red Hat Enterprise Linux 8.6. Both issues involve out-of-bounds access errors related to Promise object resolution and linear sum optimization. Red Hat has released updated Firefox packages to remediate these vulnerabilities.

thunderbird

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.2. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution from web content. Red Hat has released an important security update to fix these issues in Thunderbird version 128.11.0-1.el9_2 across various architectures.

Red Hat Security Advisory: thunderbird security update

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged by Red Hat Enterprise Linux 8.2 AUS. These include out-of-bounds memory access, clickjacking, local code execution potential, memory safety bugs, and improper isolation of script execution errors. The issues affect Thunderbird's handling of Promise objects, linear sum optimizations, script events, and the 'Copy as cURL' command. Red Hat has issued an important security advisory with updates addressing these vulnerabilities.

Two security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed by Red Hat in their Enterprise Linux 8.2 distribution. The issues involve out-of-bounds access errors during Promise object resolution and linear sum optimization, identified as CVE-2025-4918 and CVE-2025-4919 respectively. These vulnerabilities are rated as important by Red Hat Product Security. An update to Firefox version 128.10.1-1.el8_2 is available to remediate these issues.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8.4. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution errors from web content. The update fixes these issues to improve the security posture of Thunderbird on affected Red Hat systems.

firefox

Red Hat has issued a security advisory for Firefox addressing two vulnerabilities involving out-of-bounds access in Firefox and Thunderbird. These vulnerabilities are identified as CVE-2025-4918 and CVE-2025-4919. The issues relate to out-of-bounds access when resolving Promise objects and when optimizing linear sums. The advisory rates the security impact as Important and provides updated Firefox packages for Red Hat Enterprise Linux 8.4. No CVSS score is provided in the advisory.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8.6. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution errors from web content. Red Hat has released an important security update to fix these issues in Thunderbird version 128.11.0-1.el8_6. The update is available for various Red Hat Enterprise Linux 8.6 variants including Extended Update Support, Advanced Mission Critical Update Support, Update Services for SAP Solutions, and Telecommunications Update Service. Users of affected Red Hat Enterprise Linux 8.6 systems should apply the update to mitigate these vulnerabilities.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged by Red Hat for Red Hat Enterprise Linux 8.8. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, potential local code execution, memory safety bugs, and improper isolation of script execution errors from web content. The update fixes these issues to improve the security posture of Thunderbird on affected Red Hat platforms.

Multiple security vulnerabilities affecting Mozilla Thunderbird in Red Hat Enterprise Linux 10 have been addressed in an important security update. These include out-of-bounds access issues, clickjacking vulnerabilities potentially leaking saved payment card details, local code execution risks via the 'Copy as cURL' command, memory safety bugs, and improper isolation of script execution error handling from web content. The update fixes these issues to improve the security posture of Thunderbird on affected Red Hat platforms.

Multiple security vulnerabilities affecting Mozilla Thunderbird in Red Hat Enterprise Linux 9.4 Extended Update Support have been addressed. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution from web content. The update fixes these issues to improve the security posture of Thunderbird. Users of affected Red Hat Enterprise Linux 9.4 Extended Update Support versions should apply the update provided by Red Hat.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution errors from web content. The update fixes these issues to improve the security posture of Thunderbird on affected Red Hat platforms.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9. These include out-of-bounds memory access, clickjacking that could leak saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution errors. Red Hat has released an important security update addressing these issues for various Red Hat Enterprise Linux 9 variants and architectures.

security update for thunderbird

Red Hat has issued a security advisory for Mozilla Firefox addressing two vulnerabilities involving out-of-bounds access: one when resolving Promise objects (CVE-2025-4918) and another when optimizing linear sums (CVE-2025-4919). These issues affect Red Hat Enterprise Linux 7 Extended Lifecycle Support versions. The vulnerabilities are rated as important by Red Hat Product Security. Updates are available to remediate these issues.

Two security vulnerabilities (CVE-2025-4918 and CVE-2025-4919) affecting Mozilla Firefox and Thunderbird involve out-of-bounds access errors during Promise object resolution and linear sum optimization. These issues have been addressed in a security update released by Red Hat for Red Hat Enterprise Linux 9.2 Extended Update Support and related variants. The update is rated as Important by Red Hat Product Security. No CVSS score is provided in the advisory. The vulnerabilities relate to memory safety (CWE-787).

Red Hat has issued a security advisory for Mozilla Firefox addressing two vulnerabilities involving out-of-bounds access in Firefox and Thunderbird. These vulnerabilities are identified as CVE-2025-4918 and CVE-2025-4919 and relate to resolving Promise objects and optimizing linear sums, respectively. The vulnerabilities are rated with an important security impact by Red Hat. Updates are available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions across multiple architectures including x86_64, ppc64le, aarch64, and s390x. Users are advised to apply the provided security update to remediate these issues.

Two security vulnerabilities (CVE-2025-4918 and CVE-2025-4919) affecting Mozilla Firefox have been addressed in a Red Hat Enterprise Linux 10 update. Both issues involve out-of-bounds access errors, one when resolving Promise objects and the other when optimizing linear sums. Red Hat has released updated Firefox packages to fix these vulnerabilities. The update is rated as Important by Red Hat Product Security. No known exploits in the wild have been reported at this time.

Two security vulnerabilities (CVE-2025-4918 and CVE-2025-4919) affecting Mozilla Firefox in Red Hat Enterprise Linux 8 have been addressed. Both issues involve out-of-bounds access errors—one when resolving Promise objects and the other when optimizing linear sums. Red Hat has released updated Firefox packages to fix these vulnerabilities. The update is rated as Important by Red Hat Product Security. No confirmed exploits in the wild have been reported at this time.

Red Hat has issued an important security update for Mozilla Firefox addressing two out-of-bounds access vulnerabilities (CVE-2025-4918 and CVE-2025-4919) affecting Red Hat Enterprise Linux 9 and its extended support variants across multiple architectures. These vulnerabilities involve out-of-bounds access when resolving Promise objects and when optimizing linear sums. A security update is available to remediate these issues.

Search: CVE-2025-4918