PT-2025-25207 · Mozilla+2 · Firefox+2

Shaheen Fazim · Published 2025-06-10 · Updated 2025-11-19 · CVE-2025-49710

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 139.0.4

Description An integer overflow occurred in the OrderedHashTable used by the JavaScript engine.

Recommendations For versions prior to 139.0.4, update to version 139.0.4 or later to resolve the issue.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2025-11100

ALT-PU-2025-11497

ALT-PU-2025-14599

ALT-PU-2025-8725

BDU:2025-07759

CVE-2025-49710

OPENSUSE-SU-2025:15203-1

Affected Products

Alt Linux

Astra Linux

Firefox

References · 29

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49710 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15203-1 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-47.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-49710 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07759 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/721767 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-47 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49710 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-49710 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-49710 · Vendor Advisory