Catalogo CVE

CVE-2025-13027

UBUNTU-

[Catalogo CVE]

Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 145 and Thunderbird < 145.

Gravità
Sconosciuto · CVSS 7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntu24.04mozjs102102.15.1-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs102102.15.1-3ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.10.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.3.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.4.0-2UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.5.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.6.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.7.0-4UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.8.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.9.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.9.0-1build1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs102102.11.0-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]

Showing 12 observations. All 36 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Ubuntu18.04mozjs3838.8.0~repack1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu18.04mozjs3838.8.0~repack1-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu18.04mozjs3838.8.0~repack1-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu18.04mozjs5252.3.1-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu18.04mozjs5252.3.1-7fakesync1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu18.04mozjs5252.8.1-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu18.04mozjs5252.9.1-0ubuntu0.18.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu20.04mozjs5252.9.1-1build1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu20.04mozjs5252.9.1-1ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu20.04mozjs6868.5.0-1~fakesyncUnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu20.04mozjs6868.5.0-2~fakesyncUnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu20.04mozjs6868.6.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu20.04mozjs6868.6.0-1ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs102102.11.0-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs102102.12.0-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs102102.13.0-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs102102.15.1-0ubuntu0.22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs7878.13.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs7878.15.0-2UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs7878.15.0-4ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs9191.10.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs9191.5.1-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs9191.6.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs9191.6.0-2UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu22.04mozjs9191.7.0-2UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs102102.15.1-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs102102.15.1-3ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.10.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.3.0-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.4.0-2UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.5.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.6.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.7.0-4UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.8.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.9.0-1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Ubuntu24.04mozjs115115.9.0-1build1UnknownSource applicability is not established[UBUNTU-CVE-2025-13027]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "mozjs52",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "52.3.1-0ubuntu3",
        "52.3.1-7fakesync1",
        "52.8.1-0ubuntu0.18.04.1",
        "52.9.1-0ubuntu0.18.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs38",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "38.8.0~repack1-0ubuntu1",
        "38.8.0~repack1-0ubuntu3",
        "38.8.0~repack1-0ubuntu4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs68",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "68.5.0-1~fakesync",
        "68.5.0-2~fakesync",
        "68.6.0-1",
        "68.6.0-1ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs52",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "52.9.1-1build1",
        "52.9.1-1ubuntu3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs102",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "102.11.0-0ubuntu0.22.04.1",
        "102.12.0-0ubuntu0.22.04.1",
        "102.13.0-0ubuntu0.22.04.1",
        "102.15.1-0ubuntu0.22.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs78",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "78.13.0-1",
        "78.15.0-2",
        "78.15.0-4ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs91",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "91.5.1-0ubuntu1",
        "91.6.0-1",
        "91.6.0-2",
        "91.7.0-2",
        "91.10.0-0ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs102",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "102.15.1-1",
        "102.15.1-3ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    },
    {
      "name": "mozjs115",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "115.3.0-0ubuntu1",
        "115.4.0-2",
        "115.5.0-1",
        "115.6.0-1",
        "115.7.0-4",
        "115.8.0-1",
        "115.9.0-1",
        "115.9.0-1build1",
        "115.10.0-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-13027",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2025-13027",
      "provider_updated_at": "2026-10-28T20:15:48.968388489Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

L’associazione dei pacchetti è in corso.

Osservato:

Riferimenti

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]