CVE-2025-0247

Memory safety bugs present in Firefox 133 and Thunderbird 133. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 134 and Thunderbird 134.

• CWE-787

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1835193%2C1910021%2C1919803%2C1931576%2C1931948%2C1932173Broken Link, Issue Tracking
• https://www.mozilla.org/security/advisories/mfsa2025-01/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2025-04/Vendor Advisory

Published

Jan 7, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0241When segmenting specially crafted text, segmentation would c…7.7
• CVE-2025-0242Memory safety bugs present in Firefox 133, Thunderbird 133, …6.5
• CVE-2025-0243Memory safety bugs present in Firefox 133, Thunderbird 133, …5.1
• CVE-2025-0244When redirecting to an invalid protocol scheme, an attacker …5.3
• CVE-2025-0245Under certain circumstances, a user opt-in setting that Focu…3.3
• CVE-2025-0246When using an invalid protocol scheme, an attacker could spo…6.5
• CVE-2025-0248HCL iNotes is susceptible to a Reflected Cross-site Scriptin…8.1
• CVE-2025-0249HCL IEM is affected by an improper invalidation of access or…5.9
• CVE-2025-0250HCL IEM is affected by an authorization token sent in cookie…4.9
• CVE-2025-0251HCL IEM is affected by a concurrent login vulnerability.  Th…5.7
• CVE-2025-0252HCL IEM is affected by a password in cleartext vulnerability…4.8
• CVE-2025-0253HCL IEM is affected by a cookie attribute not set vulnerabil…2.4