发布时间: 2025年6月13日
修改时间: 2025年7月18日
Memory safety bug present in Firefox ESR 128.10, and Thunderbird 128.10. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 128.11 and Thunderbird < 128.11.
| NVD | openEuler | |
|---|---|---|
| Confidentiality | Low | |
| Attack Vector | Network | |
| CVSS评分 | N/A | 6.5 |
| Attack Complexity | Low | |
| Privileges Required | None | |
| Scope | Unchanged | |
| Integrity | Low | |
| User Interaction | None | |
| Availability | None |
| 公告名 | 概要 | 发布时间 |
|---|---|---|
| KylinSec-SA-2025-2654 | firefox security update | 2025年7月15日 |
| 产品 | 包 | 状态 |
|---|---|---|
| V6 | firefox | Fixed |
| KY3.5.3 | firefox | Fixed |
| KY3.5.2 | firefox | Fixed |
