CVE-2025-1011criticalCWE-94

CVE-2025-1011: falha crítica em Mozilla Firefox

A bug in WebAssembly code generation could result in a crash

Publicada em 04 fev 2025 · Atualizada em 13 abr 2026

Seguir esta CVE + Monitorar Firefox + Monitorar Thunderbird

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 0.6%

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Mozilla · Firefox Mozilla · Thunderbird

CVEs relacionadas — Mozilla Firefox

No mesmo produto, das mais perigosas para as menos.

CVE-2016-9079HIGHCVE-2016-9079EPSS 87.4%KEV CVE-2019-11708CRITICALCVE-2019-11708EPSS 55.9%KEV CVE-2019-17026HIGHCVE-2019-17026EPSS 46.3%KEV CVE-2019-11707HIGHCVE-2019-11707EPSS 38.0%KEV CVE-2024-9680CRITICALCVE-2024-9680EPSS 23.2%KEV CVE-2022-26485HIGHCVE-2022-26485EPSS 14.3%KEV

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1936454 https://lists.debian.org/debian-lts-announce/2025/02/msg00005.html https://lists.debian.org/debian-lts-announce/2025/02/msg00006.html https://www.mozilla.org/security/advisories/mfsa2025-07/https://www.mozilla.org/security/advisories/mfsa2025-09/https://www.mozilla.org/security/advisories/mfsa2025-10/https://www.mozilla.org/security/advisories/mfsa2025-11/