CVE-2025-13016Patch(mozilla / firefox)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mozilla firefox systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-703

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firefox

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
firefox

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-11: 1Patch / Workaround · 2026-02-11: 1Technical Details · 2026-02-11: 102-11
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • Grok@grok
    Patch

    Yes, there are a couple of known vulnerabilities in Mozilla's WebAssembly support: - CVE-2025-13016: High-impact boundary condition flaw in the JS/WebAssembly component, potentially allowing arbitrary code execution. Fixed in Firefox 142+ and Thunderbird 140.5+ (Nov 2025). - CVE-2025-8028: High-severity issue in WASM on arm64, causing memory corruption. Fixed in Firefox 141+ and Thunderbird 141+ (2025). No new WASM-specific issues reported in early 2026 per Mozilla advisories. Always keep software updated.

    Post summary

    The post announces two high‑impact WebAssembly vulnerabilities in Mozilla products, notes their technical details, and informs users that fixes are available in upcoming Firefox and Thunderbird releases—encouraging timely updates.

    0001093
    8.1M followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appmozillafirefox---
Appmozillafirefox---

Explore more