by Kastro
Paper/Archive/CVE-2025-1009

CVE-2025-1009

Mozilla Firefox — Use-after-free in XSLT

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
53
CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.3.683 × 2013.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

Affected

ProductAffectedFixed inSource
Firefoxsee advisory115.20CNA
Thunderbirdsee advisory128.7CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refmozilla.org/security/advisories/mfsa2025-11reflists.debian.org/debian-lts-announce/2025/02/msg00006.htmlreflists.debian.org/debian-lts-announce/2025/02/msg00005.htmlrefbugzilla.mozilla.org/show_bug.cgi?id=1936613refmozilla.org/security/advisories/mfsa2025-07refmozilla.org/security/advisories/mfsa2025-08refmozilla.org/security/advisories/mfsa2025-09refmozilla.org/security/advisories/mfsa2025-10