CVE-2025-14321

Discovered by AISLEPUBLISHED

Description

Use-after-free in the WebRTC: Signaling component. This vulnerability affects Firefox < 146, Firefox ESR < 140.6, Thunderbird < 146, and Thunderbird < 140.6.

CVSS Base Scores

CVSS v3.1(Primary)
9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersionStatus
MozillaFirefoxunspecifiedaffected
MozillaFirefox ESRunspecifiedaffected
MozillaThunderbirdunspecifiedaffected

Credits

  • Igor Morgenstern

References