Mozilla Foundation Security Advisory 2025-47
Security Vulnerabilities fixed in Firefox 139.0.4
- Announced
- June 10, 2025
- Impact
- high
- Products
- Firefox
- Fixed in
-
- Firefox 139.0.4
#CVE-2025-49709: Memory corruption in canvas surfaces
- Reporter
- Yannis Juglaret and Steven Michaud
- Impact
- high
Description
Certain canvas operations could have lead to memory corruption.
References
#CVE-2025-49710: Integer overflow in OrderedHashTable
- Reporter
- Shaheen Fazim
- Impact
- high
Description
An integer overflow was present in OrderedHashTable used by the JavaScript engine