PT-2025-30491 · Mozilla+1 · Thunderbird+2

Published 2025-07-22 · Updated 2025-10-01 · CVE-2025-8044

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Thunderbird versions prior to 141

Description The software contains memory safety bugs. Some of these bugs showed evidence of memory corruption, and it is presumed that with enough effort, some of these could have been exploited to run arbitrary code.

Recommendations Update Firefox to version 141 or later. Update Thunderbird to version 141 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2025-10124

ALT-PU-2025-11495

ALT-PU-2025-11497

ALT-PU-2025-9988

BDU:2025-10493

CVE-2025-8044

OPENSUSE-SU-2025:15386-1

Affected Products

Alt Linux

Firefox

Thunderbird

References · 43

• https://mozilla.org/security/advisories/mfsa2025-61 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-56 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8044 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-56 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-8044 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8044 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/723258 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-61 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10493 · Security Note
• https://ubuntu.com/security/CVE-2025-8044 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-8044 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-56/#CVE-2025-8044 · Vendor Advisory