Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-5922-1 | firefox-esr security update |
EUVD |
EUVD-2025-15600 | An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4 and Firefox ESR < 128.10.1. |
No reference.
Sun, 18 May 2025 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Sun, 18 May 2025 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4 and Firefox ESR < 128.10.1. | Duplicate of CVE-2025-4919 |
Sat, 17 May 2025 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4 and Firefox ESR < 128.10.1. | |
| References |
|
Subscriptions
No data.
Status: REJECTED
Assigner: mozilla
Published:
Updated: 2025-05-18T19:22:40.758Z
Reserved: 2025-05-17T21:07:25.019Z
Link: CVE-2025-4921
No data.
Status : Rejected
Published: 2025-05-17T22:15:19.843
Modified: 2025-05-18T20:15:19.273
Link: CVE-2025-4921
No data.
OpenCVE Enrichment
No data.
No weakness.
Debian DSA
EUVD