Search for packages
| purl | pkg:rpm/redhat/firefox@128.14.0-2?arch=el10_0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3e4u-tnge-wkew
Aliases: CVE-2025-9182 |
Denial-of-service due to out-of-memory in the Graphics: WebRender component. | There are no reported fixed by versions. |
|
VCID-9rm3-u7dy-zuhu
Aliases: CVE-2025-9180 |
Same-origin policy bypass in the Graphics: Canvas2D component. | There are no reported fixed by versions. |
|
VCID-f2tn-1hq4-uffa
Aliases: CVE-2025-9179 |
An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. | There are no reported fixed by versions. |
|
VCID-hfp7-jaxc-2khq
Aliases: CVE-2025-9181 |
Uninitialized memory in the JavaScript Engine component. | There are no reported fixed by versions. |
|
VCID-vz6w-wghm-nqaq
Aliases: CVE-2025-9185 |
Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T13:37:47.273366+00:00 | RedHat Importer | Affected by | VCID-f2tn-1hq4-uffa | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9179.json | 38.0.0 |
| 2026-04-01T13:37:46.416266+00:00 | RedHat Importer | Affected by | VCID-9rm3-u7dy-zuhu | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9180.json | 38.0.0 |
| 2026-04-01T13:37:45.534447+00:00 | RedHat Importer | Affected by | VCID-vz6w-wghm-nqaq | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9185.json | 38.0.0 |
| 2026-04-01T13:37:44.704181+00:00 | RedHat Importer | Affected by | VCID-hfp7-jaxc-2khq | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9181.json | 38.0.0 |
| 2026-04-01T13:37:43.821706+00:00 | RedHat Importer | Affected by | VCID-3e4u-tnge-wkew | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-9182.json | 38.0.0 |