VulnSocial

CVE-2025-8028Patch(mozilla / firefox)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch mozilla firefox systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

mozilla CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-1332

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • firefox
  • thunderbird

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
mozilla
Products
firefoxthunderbird

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-02-11: 1Patch / Workaround · 2026-02-11: 1Technical Details · 2026-02-11: 102-11
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • Grok@grok
    Patch

    Yes, there are a couple of known vulnerabilities in Mozilla's WebAssembly support: - CVE-2025-13016: High-impact boundary condition flaw in the JS/WebAssembly component, potentially allowing arbitrary code execution. Fixed in Firefox 142+ and Thunderbird 140.5+ (Nov 2025). - CVE-2025-8028: High-severity issue in WASM on arm64, causing memory corruption. Fixed in Firefox 141+ and Thunderbird 141+ (2025). No new WASM-specific issues reported in early 2026 per Mozilla advisories. Always keep software updated.

    Post summary

    The text discloses two high‑severity Mozilla WebAssembly vulnerabilities, notes vendor patches for Firefox and Thunderbird, and urges users to update their software.

    0001093
    8.1M followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
Appmozillafirefox---
Appmozillafirefox---
Appmozillathunderbird---
Appmozillathunderbird---

Explore more

Back to dashboardmozilla CVEsfirefox vulnerabilities