PT-2025-16338 · Mozilla+2 · Firefox+2

Published 2025-04-15 · Updated 2025-11-19 · CVE-2025-3608

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137.0.2

Description A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition.

Recommendations For versions prior to 137.0.2, update to version 137.0.2 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2025-11100

ALT-PU-2025-14599

ALT-PU-2025-6353

ALT-PU-2025-7697

BDU:2025-06663

CVE-2025-3608

OPENSUSE-SU-2025:15005-1

Affected Products

Alt Linux

Astra Linux

Firefox

References · 32

• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-25/#CVE-2025-3608 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-3608 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-3608 · Security Note
• https://ubuntu.com/security/CVE-2025-3608 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15005-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-3608 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-25 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-3608 · Security Note
• https://bdu.fstec.ru/vul/2025-06663 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-25 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-3608 · Vendor Advisory