Firefox 141 Security Advisory: CVE-2025-8027 Memory Corruption and Multiple Vulnerabilities

Critical Vulnerability Information Vulnerability Overview Advisory Number: 2025-56 Product: Firefox 141 Release Date: January 25, 2023 Vulnerability Details 1. CVE-2025-8027 - Impact: High - Description: JavaScript engine writes only partial return values to the stack, potentially leading to memory corruption. 2. CVE-2025-8028 - Impact: Medium - Description: Large branch tables may cause instruction truncation, affecting code execution. 3. CVE-2025-8041 - Impact: Medium - Description: URL truncation issue in Android Firefox, potentially exploitable for attacks. 4. CVE-2025-8042 - Impact: Medium - Description: Sandbox framework can initiate downloads, posing security risks. 5. CVE-2025-8029 - Impact: Medium - Description: JavaScript: URL execution on objects and embed tags may lead to unintended behavior. 6. CVE-2025-8036 - Impact: Medium - Description: DNS rebinding bypasses CORS restrictions, enabling cross-origin requests. 7. CVE-2025-8037 - Impact: Medium - Description: Anonymous cookies overwrite secure cookies, leading to data leakage risks. 8. CVE-2025-8030 - Impact: Medium - Description: Potential user-assisted code execution in the "Copy as cURL command" feature. 9. CVE-2025-8043 - Impact: Medium - Description: URL truncation error, potentially affecting data integrity. 10. CVE-2025-8044 - Impact: Medium - Description: Improper URL stripping in CSP reports, potentially causing security policy failures. 11. CVE-2025-8032 - Impact: Medium - Description: XSLT documents can bypass CSP, posing security risks. 12. CVE-2025-8038 - Impact: Medium - Description: CSP frame-src does not properly enforce paths, potentially leading to content injection. 13. CVE-2025-8039 - Impact: Low - Description: Search terms persist in the URL bar, potentially leaking user information. 14. CVE-2025-8033 - Impact: Low - Description: JavaScript generator state machine improperly handled, potentially causing logical errors. 15. CVE-2025-8034 - Impact: High - Description: Memory safety vulnerability fix involving multiple components. 16. CVE-2025-8040 - Impact: High - Description: Memory safety vulnerability fix involving multiple components. ``` These vulnerabilities cover a range of impact levels from high to low, primarily involving risks related to memory safety, code execution, and data leakage.

Goal Reached Thanks to every supporter — we hit 100%!

Firefox 141 Security Advisory: CVE-2025-8027 Memory Corruption and Multiple Vulnerabilities