CVE-2025-4919 is a critical vulnerability in Firefox ESR where an attacker can perform out-of-bounds read or write operations on a JavaScript object by confusing array index sizes. This flaw affects Firefox ESR versions prior to 115.23.1 and was fixed in Firefox ESR 128.10.1. The vulnerability allows high impact on confidentiality, integrity, and availability.