Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146.0.1.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/buglist.cgi?bug_id=1996570%2C1999700 | Broken Link |
| https://www.mozilla.org/security/advisories/mfsa2025-98/ | Vendor Advisory |
Configurations
History
13 Apr 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146.0.1. |
30 Dec 2025, 20:05
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mozilla
Mozilla firefox |
|
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:* | |
| References | () https://bugzilla.mozilla.org/buglist.cgi?bug_id=1996570%2C1999700 - Broken Link | |
| References | () https://www.mozilla.org/security/advisories/mfsa2025-98/ - Vendor Advisory |
18 Dec 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-119 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
18 Dec 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-18 15:15
Updated : 2026-04-13 15:16
NVD link : CVE-2025-14861
Mitre link : CVE-2025-14861
CVE.ORG link : CVE-2025-14861
JSON object : View
Products Affected
mozilla
- firefox
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer