diff options
| author | Fernando Apesteguía <fernape@FreeBSD.org> | 2025-10-17 19:25:00 +0200 |
|---|---|---|
| committer | Fernando Apesteguía <fernape@FreeBSD.org> | 2025-10-17 19:25:00 +0200 |
| commit | 56645ae72572548a973d208ce19e164709e3ae1d (patch) | |
| tree | 3325157332398f294dcd270fe46211f0c8bd6bc5 | |
| parent | security/vuxml: Add Mozilla vulnerabilities (diff) | |
security/vuxml: Add Firefox vulnerability
* CVE-2025-11152
| -rw-r--r-- | security/vuxml/vuln/2025.xml | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml index ae8259ce9b17..9de819d619cf 100644 --- a/security/vuxml/vuln/2025.xml +++ b/security/vuxml/vuln/2025.xml @@ -1,3 +1,30 @@ + <vuln vid="f3550d26-ab7d-11f0-b961-b42e991fc52e"> + <topic>Firefox -- Sandbox escape</topic> + <affects> + <package> + <name>firefox</name> + <range><lt>143.0.3,2</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>security@mozilla.org reports:</p> + <blockquote cite="https://bugzilla.mozilla.org/show_bug.cgi?id=1987246"> + <p>Sandbox excape due to integer overflow in the Graphics: + Canvas2D component</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2025-11152</cvename> + <url>https://nvd.nist.gov/vuln/detail/CVE-2025-11152</url> + </references> + <dates> + <discovery>2025-09-30</discovery> + <entry>2025-10-17</entry> + </dates> + </vuln> + <vuln vid="7b9a8247-ab7b-11f0-b961-b42e991fc52e"> <topic>Mozilla -- Memory safety bugs</topic> <affects> |