Threats Tagged 'cve-2025-4918'

Two security vulnerabilities affecting Mozilla Firefox and Thunderbird involve out-of-bounds access errors: one when resolving Promise objects (CVE-2025-4918) and another when optimizing linear sums (CVE-2025-4919). These issues were addressed in a security update provided by Red Hat for their Enterprise Linux 8.8 Extended Update Support and related products. The update is rated as important by Red Hat Product Security. No CVSS score is provided in the advisory. The vulnerabilities relate to improper memory access (CWE-787).

Multiple security vulnerabilities have been identified and fixed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8. These include issues such as JavaScript execution via spoofed PDF attachments, sender spoofing, unsolicited file downloads, tracking link bypasses, out-of-bounds memory access, clickjacking, and memory safety bugs. The Red Hat advisory RHSA-2025:8756 provides updates addressing these vulnerabilities. The update is rated as important by Red Hat Product Security.

Two security vulnerabilities (CVE-2025-4918 and CVE-2025-4919) affecting Mozilla Firefox and Thunderbird were addressed by Red Hat in an important security update for Red Hat Enterprise Linux 8.6. Both issues involve out-of-bounds access errors related to Promise object resolution and linear sum optimization. Red Hat has released updated Firefox packages to remediate these vulnerabilities.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.2. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution from web content. Red Hat has released an important security update to fix these issues in Thunderbird version 128.11.0-1.el9_2 across various architectures.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged by Red Hat Enterprise Linux 8.2 AUS. These include out-of-bounds memory access, clickjacking, local code execution potential, memory safety bugs, and improper isolation of script execution errors. The issues affect Thunderbird's handling of Promise objects, linear sum optimizations, script events, and the 'Copy as cURL' command. Red Hat has issued an important security advisory with updates addressing these vulnerabilities.

Two security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed by Red Hat in their Enterprise Linux 8.2 distribution. The issues involve out-of-bounds access errors during Promise object resolution and linear sum optimization, identified as CVE-2025-4918 and CVE-2025-4919 respectively. These vulnerabilities are rated as important by Red Hat Product Security. An update to Firefox version 128.10.1-1.el8_2 is available to remediate these issues.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8.4. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution errors from web content. The update fixes these issues to improve the security posture of Thunderbird on affected Red Hat systems.

Red Hat has issued a security advisory for Firefox addressing two vulnerabilities involving out-of-bounds access in Firefox and Thunderbird. These vulnerabilities are identified as CVE-2025-4918 and CVE-2025-4919. The issues relate to out-of-bounds access when resolving Promise objects and when optimizing linear sums. The advisory rates the security impact as Important and provides updated Firefox packages for Red Hat Enterprise Linux 8.4. No CVSS score is provided in the advisory.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8.6. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution errors from web content. Red Hat has released an important security update to fix these issues in Thunderbird version 128.11.0-1.el8_6. The update is available for various Red Hat Enterprise Linux 8.6 variants including Extended Update Support, Advanced Mission Critical Update Support, Update Services for SAP Solutions, and Telecommunications Update Service. Users of affected Red Hat Enterprise Linux 8.6 systems should apply the update to mitigate these vulnerabilities.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged by Red Hat for Red Hat Enterprise Linux 8.8. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, potential local code execution, memory safety bugs, and improper isolation of script execution errors from web content. The update fixes these issues to improve the security posture of Thunderbird on affected Red Hat platforms.