Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Certificate length was not properly checked when added to a certificate store. In practice only trusted data was processed. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH: CVE-2025-1014 (CVSS 8.8) Certificate length validation flaw in Firefox & Thunderbird. Improper cert store checks could enable remote attacks. Patched in: • Firefox 135 • Firefox ESR 128.7 • Thunderbird 128.7/135 #CVE #PatchNow #ThreatIntel https://t.co/CxLo9Kf6Z4
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | mozilla | thunderbird | - | - | - |
| App | mozilla | thunderbird | - | - | - |