Security Advisory

CVE-2025-8027

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-22 20:49:24
Last updated 2026-04-13 14:26:46
Assigner mozilla
State PUBLISHED

Description

On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, read the entire 64 bits. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.