AZL-59523

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-59523.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-59523

Upstream

CVE-2025-3034

Published

2025-04-01T13:15:41Z

Modified

2026-04-21T04:37:17.364003Z

Summary

CVE-2025-3034 affecting package libvorbis 1.3.7-1

Details

Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 137 and Thunderbird < 137.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-3034

Affected packages

Azure Linux:2 / libvorbis

Package

Name: libvorbis
Purl: pkg:rpm/azure-linux/libvorbis

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

1.3.7-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-59523.json"