PT-2025-46352 · Mozilla+9 · Firefox Esr+10

Irvan Kurniawan · Published 2025-11-11 · Updated 2026-02-02 · CVE-2025-13012

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 145 Firefox ESR versions prior to 140.5 Firefox ESR versions prior to 115.30

Description A race condition exists within the Graphics component of the software. A race condition occurs when multiple threads access and manipulate shared data concurrently, leading to unpredictable behavior.

Recommendations Update Firefox to version 145 or later. Update Firefox ESR to version 140.5 or later. Update Firefox ESR to version 115.30 or later.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALSA-2025:21280

ALSA-2025:21281

ALSA-2025:21843

ALSA-2025:21881

ALSA-2025:22363

ALT-PU-2025-14358

ALT-PU-2025-14554

ALT-PU-2025-14878

BDU:2025-14551

CESA-2025_21881

CESA-2025_22363

CVE-2025-13012

DLA-4370-1

DLA-4372-1

DSA-6054-1

DSA-6059-1

INFSA-2025_21280

INFSA-2025_21842

INFSA-2025_21881

INFSA-2025_22363

MGASA-2025-0300

MGASA-2025-0305

OESA-2025-2770

OPENSUSE-SU-2025:15735-1

OPENSUSE-SU-2025:15738-1

OPENSUSE-SU-2025:20065-1

OPENSUSE-SU-2026:20002-1

RHSA-2025:21120

RHSA-2025:21121

RHSA-2025:21280

RHSA-2025:21281

RHSA-2025:21841

RHSA-2025:21842

RHSA-2025:21843

RHSA-2025:21844

RHSA-2025:21881

RHSA-2025:22363

RHSA-2025:22367

RHSA-2025:22368

RHSA-2025:22369

RHSA-2025:22371

RHSA-2025:22372

RHSA-2025:22373

RHSA-2025:22374

RHSA-2025:22375

RHSA-2025:22449

RHSA-2025:22450

RHSA-2025:22451

RHSA-2025:22791

RHSA-2025:22792

RHSA-2025:22882

RHSA-2025:22883

RHSA-2025_21280

RHSA-2025_21842

RHSA-2025_21881

SUSE-SU-2025:21021-1

SUSE-SU-2025:4173-1

SUSE-SU-2025:4174-1

SUSE-SU-2025:4195-1

USN-7991-1

Affected Products

Alt Linux

Almalinux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 257

• https://ubuntu.com/security/CVE-2025-9184 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-6427 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-6433 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-91 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-9179 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-8029 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0305.html · Security Note
• https://ubuntu.com/security/CVE-2025-9180 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-11715 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-0241 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-8036 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-13019 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-13012 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14551 · Security Note