Security Advisory

CVE-2025-1012

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-02-04 13:58:53
Last updated 2026-04-13 14:25:14
Assigner mozilla
State PUBLISHED

Description

A race during concurrent delazification could have led to a use-after-free. This vulnerability was fixed in Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.