CVE catalog

CVE-2025-1942

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.48% · Oct 25, 2026

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpefirefoxNot reported136.0fixed
CpethunderbirdNot reported136.0fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0483.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0487.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0488.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0488.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0489.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0492.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0493.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0494.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0496.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0498.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0499.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04100.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04100.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04101.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04102.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04103.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04104.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04105.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.5+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04107.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04110.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04110.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04115.0+build2-0ubuntu0.20.04.3vulnerable
Ubuntufirefox20.04115.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04116.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0.3+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04117.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04117.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04118.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04118.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04119.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04119.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04120.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04120.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04121.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04121.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04122.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04122.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04123.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04123.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04125.0.2+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04125.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04126.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04126.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04127.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04128.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04129.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04129.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04130.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04130.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0+build1.1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04132.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04133.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04134.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04135.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04136.0+build3-0ubuntu0.20.04.1fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable
Ubuntumozjs10222.04102.11.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.12.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.13.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.15.1-0ubuntu0.22.04.1vulnerable
Ubuntumozjs7822.0478.13.0-1vulnerable
Ubuntumozjs7822.0478.15.0-2vulnerable
Ubuntumozjs7822.0478.15.0-4ubuntu1vulnerable
Ubuntumozjs9122.0491.5.1-0ubuntu1vulnerable
Ubuntumozjs9122.0491.6.0-1vulnerable
Ubuntumozjs9122.0491.6.0-2vulnerable
Ubuntumozjs9122.0491.7.0-2vulnerable
Ubuntumozjs9122.0491.10.0-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.1.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.4.0+build1.1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.4.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.5.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.5.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.6.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.7.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.7.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.8.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.9.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:91.11.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.2.2+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.4.2+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.7.1+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.8.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.9.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.10.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.11.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.13.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.15.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.15.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.3.1+build1-0ubuntu0.22.04.2vulnerable
Ubuntuthunderbird22.041:115.4.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.5.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.6.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.8.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.9.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.10.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.11.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.12.0+build3-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.13.0+build5-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.15.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.16.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.18.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:128.12.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:140.7.1+build1-0ubuntu0.22.04.1fixed
Ubuntumozjs10224.04102.15.1-1vulnerable
Ubuntumozjs10224.04102.15.1-3ubuntu2vulnerable
Ubuntumozjs11524.04115.3.0-0ubuntu1vulnerable
Ubuntumozjs11524.04115.4.0-2vulnerable
Ubuntumozjs11524.04115.5.0-1vulnerable
Ubuntumozjs11524.04115.6.0-1vulnerable
Ubuntumozjs11524.04115.7.0-4vulnerable
Ubuntumozjs11524.04115.8.0-1vulnerable
Ubuntumozjs11524.04115.9.0-1vulnerable
Ubuntumozjs11524.04115.9.0-1build1vulnerable
Ubuntumozjs11524.04115.10.0-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpefirefoxcpeNot reported136.0Not reportedNVD-CVE-2025-1942Not reported
CpethunderbirdcpeNot reported136.0Not reportedNVD-CVE-2025-1942Not reported
Ubuntufirefoxdeb20.04136.0+build3-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2025-1942Not reported
Ubuntuthunderbirddeb22.041:140.7.1+build1-0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2025-1942Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References