CVE-2025-1942
March 12, 2025, 5:15 p.m.
None
No Score
Description
When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136 and Thunderbird < 136.
Product(s) Impacted
| Product | Versions |
|---|---|
| Firefox |
|
Weaknesses
CWE-908
Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
Tags
Date
- Published: March 4, 2025, 2:15 p.m.
- Last Modified: March 12, 2025, 5:15 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
security@mozilla.org
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.