p PatchFirst

CVE-2025-3608

CVE-2025-3608 · Race condition in nsHttpTransaction could lead to memory corruption

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability was fixed in Firefox 137.0.2.

CVSS 6.5 · Medium · EPSS 0.3%

Published
Updated

Stack: system

Affected products and versions

  • firefox

    Versions
    • ≥ 137.0.2: Not affected (rpm)

    No fix published

  • mozjs52 Ubuntu:18.04:LTS

    Versions
    • 52.3.1-0ubuntu3
    • 52.3.1-7fakesync1
    • 52.8.1-0ubuntu0.18.04.1
    • 52.9.1-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs38 Ubuntu:18.04:LTS

    Versions
    • 38.8.0~repack1-0ubuntu1
    • 38.8.0~repack1-0ubuntu3
    • 38.8.0~repack1-0ubuntu4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs68 Ubuntu:20.04:LTS

    Versions
    • 68.5.0-1~fakesync
    • 68.5.0-2~fakesync
    • 68.6.0-1
    • 68.6.0-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs52 Ubuntu:20.04:LTS

    Versions
    • 52.9.1-1build1
    • 52.9.1-1ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs102 Ubuntu:22.04:LTS

    Versions
    • 102.11.0-0ubuntu0.22.04.1
    • 102.12.0-0ubuntu0.22.04.1
    • 102.13.0-0ubuntu0.22.04.1
    • 102.15.1-0ubuntu0.22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs78 Ubuntu:22.04:LTS

    Versions
    • 78.13.0-1
    • 78.15.0-2
    • 78.15.0-4ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs91 Ubuntu:22.04:LTS

    Versions
    • 91.5.1-0ubuntu1
    • 91.6.0-1
    • 91.6.0-2
    • 91.7.0-2
    • 91.10.0-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs102 Ubuntu:24.04:LTS

    Versions
    • 102.15.1-1
    • 102.15.1-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs115 Ubuntu:24.04:LTS

    Versions
    • 115.3.0-0ubuntu1
    • 115.4.0-2
    • 115.5.0-1
    • 115.6.0-1
    • 115.7.0-4
    • 115.8.0-1
    • 115.9.0-1
    • 115.9.0-1build1
    • 115.10.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →