PT-2025-49853 · Mozilla+1 · Thunderbird+2

Andrew Mccreight · Published 2025-12-09 · Updated 2026-02-01 · CVE-2025-14326

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146 Thunderbird versions prior to 146

Description A use-after-free issue exists in the Audio/Video: GMP component. This condition may allow for unexpected behavior or potential compromise.

Recommendations Update Firefox to version 146 or later. Update Thunderbird to version 146 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-16355

CVE-2025-14326

OPENSUSE-SU-2025:15813-1

Affected Products

Alt Linux

Firefox

Thunderbird

References · 33

• https://osv.dev/vulnerability/openSUSE-SU-2025:15813-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-14326 · Security Note
• https://mozilla.org/security/advisories/mfsa2025-92 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-95 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14326 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2025-92/#CVE-2025-14326 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-92 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-14326 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/727087 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-14326 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-14326 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16355 · Security Note