PT-2025-41909 · Mozilla+1 · Thunderbird+2

Published 2025-10-14 · Updated 2026-04-15 · CVE-2025-11721

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144

Description A memory safety issue exists in Firefox and Thunderbird. Evidence suggests the bug could lead to memory corruption, potentially allowing for arbitrary code execution.

Recommendations Update Firefox to version 144 or later. Update Thunderbird to version 144 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2025-13476

ALT-PU-2025-13478

BDU:2025-13294

CVE-2025-11721

OPENSUSE-SU-2025:15645-1

Affected Products

Alt Linux

Firefox

Thunderbird

References · 36

• https://bdu.fstec.ru/vul/2025-13294 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-81 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-84 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11721 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15645-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE164 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-81 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-84 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-11721 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11721 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/725772 · Security Note
• https://ubuntu.com/security/CVE-2025-11721 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-81/#CVE-2025-11721 · Vendor Advisory