A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability affects Firefox < 137.0.2.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1951554 | Permissions Required |
| https://www.cve.org/CVERecord?id=CVE-2025-3608 | Third Party Advisory |
| https://www.mozilla.org/security/advisories/mfsa2025-25/ | Vendor Advisory |
Configurations
History
21 May 2025, 19:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mozilla firefox
Mozilla |
|
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* | |
| References | () https://www.cve.org/CVERecord?id=CVE-2025-3608 - Third Party Advisory | |
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1951554 - Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2025-25/ - Vendor Advisory |
15 Apr 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-15 13:15
Updated : 2025-05-21 19:48
NVD link : CVE-2025-3608
Mitre link : CVE-2025-3608
JSON object : View
Products Affected
mozilla
- firefox
CWE
No CWE.