CVE-2025-11708

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-11708

Use-after-free in MediaTrackGraphImpl::GetInstance() This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

Published Oct 15, 2025

https://bugzilla.mozilla.org/show_bug.cgi?id=1988931 https://www.mozilla.org/security/advisories/mfsa2025-81/https://www.mozilla.org/security/advisories/mfsa2025-83/https://www.mozilla.org/security/advisories/mfsa2025-84/https://www.mozilla.org/security/advisories/mfsa2025-85/

CVSS ScoreMedium

6.9


rpm	thunderbird	10.0.1-3.0.1.el6_2
rpm	thunderbird	10.0.10-1.0.1.el6_3
rpm	thunderbird	10.0.11-1.0.1.el6_3
rpm	thunderbird	10.0.12-3.0.1.el6_3
rpm	thunderbird	10.0.3-1.0.1.el6_2
rpm	thunderbird	10.0.4-1.0.1.el6_2
rpm	thunderbird	10.0.5-2.0.1.el6_2
rpm	thunderbird	10.0.6-1.0.1.el6_3
rpm	thunderbird	10.0.7-1.0.1.el6_3
rpm	thunderbird	10.0.8-1.0.1.el6_3
rpm	thunderbird	10.0.8-2.0.1.el6_3
rpm	thunderbird	102.10.0-2.0.1.el7_9
rpm	thunderbird	102.10.0-2.0.1.el8_7
rpm	thunderbird	102.10.0-2.0.1.el9_1
rpm	thunderbird	102.11.0-1.0.1.el7_9
rpm	thunderbird	102.11.0-1.0.1.el8_7
rpm	thunderbird	102.11.0-1.0.1.el9_2
rpm	thunderbird	102.12.0-1.0.1.el7_9
rpm	thunderbird	102.12.0-1.0.1.el8_8
rpm	thunderbird	102.12.0-1.0.1.el9_2
rpm	thunderbird	102.13.0-2.0.1.el7_9
rpm	thunderbird	102.13.0-2.0.1.el8_8
rpm	thunderbird	102.13.0-2.0.1.el9_2
rpm	thunderbird	102.14.0-1.0.1.el7_9
rpm	thunderbird	102.14.0-1.0.1.el8_8
rpm	thunderbird	102.14.0-1.0.1.el9_2
rpm	thunderbird	102.15.0-1.0.1.el7_9
rpm	thunderbird	102.15.0-1.0.1.el8_8
rpm	thunderbird	102.15.0-1.0.1.el9_2
rpm	thunderbird	102.15.1-1.0.1.el7_9
rpm	thunderbird	102.15.1-1.0.1.el8_8
rpm	thunderbird	102.15.1-1.0.1.el9_2
rpm	thunderbird	102.3.0-3.0.1.el7_9
rpm	thunderbird	102.3.0-3.0.1.el8_6
rpm	thunderbird	102.3.0-3.0.1.el9_0
rpm	thunderbird	102.3.0-3.0.1.el9_1
rpm	thunderbird	102.3.0-4.0.1.el7_9
rpm	thunderbird	102.3.0-4.0.1.el8_6
rpm	thunderbird	102.3.0-4.0.1.el9_0
rpm	thunderbird	102.4.0-1.0.1.el7_9
rpm	thunderbird	102.4.0-1.0.1.el8_6
rpm	thunderbird	102.4.0-1.el9_0
rpm	thunderbird	102.5.0-2.0.1.el7_9
rpm	thunderbird	102.5.0-2.0.1.el8_7
rpm	thunderbird	102.5.0-2.0.1.el9_1
rpm	thunderbird	102.6.0-2.0.1.el7_9
rpm	thunderbird	102.6.0-2.0.1.el8_7
rpm	thunderbird	102.6.0-2.0.1.el9_1
rpm	thunderbird	102.7.1-1.0.1.el7_9
rpm	thunderbird	102.7.1-1.0.1.el8_7

Ecosystem	Package	Version

CVE-2025-11708 | Components Impacted | Sonatype Guide | Sonatype Guide

Find vulnerabilities. Fix fast with AI.

CVE-2025-11708