High severity7.3NVD Advisory· Published Sep 16, 2025· Updated Apr 13, 2026
CVE-2025-10528
CVE-2025-10528
Description
Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.
Affected products
3cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*+ 1 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*range: <143.0
- cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*range: <140.3.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- www.mozilla.org/security/advisories/mfsa2025-73/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2025-75/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2025-77/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2025-78/nvdVendor Advisory
- bugzilla.mozilla.org/show_bug.cginvdPermissions Required
- lists.debian.org/debian-lts-announce/2025/09/msg00020.htmlnvd
- lists.debian.org/debian-lts-announce/2025/09/msg00026.htmlnvd
News mentions
0No linked articles in our index yet.