A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability affects Firefox < 137.0.2.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1951554 | Permissions Required |
| https://www.cve.org/CVERecord?id=CVE-2025-3608 | Third Party Advisory |
| https://www.mozilla.org/security/advisories/mfsa2025-25/ | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2025-04-15 13:15
Updated : 2025-05-21 19:48
NVD link : CVE-2025-3608
Mitre link : CVE-2025-3608
CVE.ORG link : CVE-2025-3608
JSON object : View
Products Affected
mozilla
- firefox
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')