PT-2025-25206 · Mozilla+2 · Firefox+2

Steven Michaud + 1 · Published 2025-06-10 · Updated 2025-11-19 · CVE-2025-49709

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 139.0.4

Description Certain canvas operations could have led to memory corruption.

Recommendations For versions prior to 139.0.4, update to version 139.0.4 or later to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2025-11100

ALT-PU-2025-11497

ALT-PU-2025-14599

ALT-PU-2025-8725

BDU:2025-07758

CVE-2025-49709

OPENSUSE-SU-2025:15203-1

Affected Products

Alt Linux

Astra Linux

Firefox

References · 29

• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-47 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-47 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/721768 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-47/#CVE-2025-49709 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-49709 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49709 · Security Note
• https://bdu.fstec.ru/vul/2025-07758 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-49709 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-49709 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15203-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49709 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory