UBUNTU-CVE-2025-9179

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-9179

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-9179.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-9179

Upstream

CVE-2025-9179

Published

2025-08-20T00:00:00Z

Modified

2025-08-22T17:01:17Z

Severity

Ubuntu - medium

Summary

[none]

Details

An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.

References

Affected packages

Ubuntu:Pro:18.04:LTS / mozjs52

Package

Name: mozjs52
Purl: pkg:deb/ubuntu/mozjs52@52.9.1-0ubuntu0.18.04.1?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

52.*

52.3.1-0ubuntu3

52.3.1-7fakesync1

52.8.1-0ubuntu0.18.04.1

52.9.1-0ubuntu0.18.04.1

Ubuntu:Pro:18.04:LTS / mozjs38

Package

Name: mozjs38
Purl: pkg:deb/ubuntu/mozjs38@38.8.0~repack1-0ubuntu4?arch=source&distro=esm-apps/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

38.*

38.8.0~repack1-0ubuntu1

38.8.0~repack1-0ubuntu3

38.8.0~repack1-0ubuntu4

Ubuntu:Pro:20.04:LTS / mozjs68

Package

Name: mozjs68
Purl: pkg:deb/ubuntu/mozjs68@68.6.0-1ubuntu1?arch=source&distro=esm-infra/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

68.*

68.5.0-1~fakesync

68.5.0-2~fakesync

68.6.0-1

68.6.0-1ubuntu1

Ubuntu:Pro:20.04:LTS / mozjs52

Package

Name: mozjs52
Purl: pkg:deb/ubuntu/mozjs52@52.9.1-1ubuntu3?arch=source&distro=esm-apps/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

52.*

52.9.1-1build1

52.9.1-1ubuntu3

Ubuntu:22.04:LTS / mozjs102

Package

Name: mozjs102
Purl: pkg:deb/ubuntu/mozjs102@102.15.1-0ubuntu0.22.04.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

102.*

102.11.0-0ubuntu0.22.04.1

102.12.0-0ubuntu0.22.04.1

102.13.0-0ubuntu0.22.04.1

102.15.1-0ubuntu0.22.04.1

Ubuntu:22.04:LTS / mozjs78

Package

Name: mozjs78
Purl: pkg:deb/ubuntu/mozjs78@78.15.0-4ubuntu1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

78.*

78.13.0-1

78.15.0-2

78.15.0-4ubuntu1

Ubuntu:22.04:LTS / mozjs91

Package

Name: mozjs91
Purl: pkg:deb/ubuntu/mozjs91@91.10.0-0ubuntu1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

91.*

91.5.1-0ubuntu1

91.6.0-1

91.6.0-2

91.7.0-2

91.10.0-0ubuntu1

Ubuntu:22.04:LTS / thunderbird

Package

Name: thunderbird
Purl: pkg:deb/ubuntu/thunderbird@1:128.12.0+build1-0ubuntu0.22.04.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1:91.*

1:91.1.2+build1-0ubuntu1

1:91.3.0+build2-0ubuntu1

1:91.3.1+build1-0ubuntu1

1:91.3.2+build1-0ubuntu1

1:91.4.0+build1.1-0ubuntu1

1:91.4.0+build2-0ubuntu1

1:91.5.0+build1-0ubuntu1

1:91.5.1+build1-0ubuntu1

1:91.6.1+build1-0ubuntu1

1:91.7.0+build1-0ubuntu1

1:91.7.0+build2-0ubuntu1

1:91.8.0+build2-0ubuntu1

1:91.9.1+build1-0ubuntu0.22.04.1

1:91.11.0+build2-0ubuntu0.22.04.1

1:102.*

1:102.2.2+build1-0ubuntu0.22.04.1

1:102.4.2+build2-0ubuntu0.22.04.1

1:102.7.1+build2-0ubuntu0.22.04.1

1:102.8.0+build2-0ubuntu0.22.04.1

1:102.9.0+build1-0ubuntu0.22.04.1

1:102.10.0+build2-0ubuntu0.22.04.1

1:102.11.0+build1-0ubuntu0.22.04.1

1:102.13.0+build1-0ubuntu0.22.04.1

1:102.15.0+build1-0ubuntu0.22.04.1

1:102.15.1+build1-0ubuntu0.22.04.1

1:115.*

1:115.3.1+build1-0ubuntu0.22.04.2

1:115.4.1+build1-0ubuntu0.22.04.1

1:115.5.0+build1-0ubuntu0.22.04.1

1:115.6.0+build2-0ubuntu0.22.04.1

1:115.8.1+build1-0ubuntu0.22.04.1

1:115.9.0+build1-0ubuntu0.22.04.1

1:115.10.1+build1-0ubuntu0.22.04.1

1:115.11.0+build2-0ubuntu0.22.04.1

1:115.12.0+build3-0ubuntu0.22.04.1

1:115.13.0+build5-0ubuntu0.22.04.1

1:115.15.0+build1-0ubuntu0.22.04.1

1:115.16.0+build2-0ubuntu0.22.04.1

1:115.18.0+build1-0ubuntu0.22.04.1

1:128.*

1:128.12.0+build1-0ubuntu0.22.04.1

Ubuntu:24.04:LTS / mozjs102

Package

Name: mozjs102
Purl: pkg:deb/ubuntu/mozjs102@102.15.1-3ubuntu2?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

102.*

102.15.1-1

102.15.1-3ubuntu2

Ubuntu:24.04:LTS / mozjs115

Package

Name: mozjs115
Purl: pkg:deb/ubuntu/mozjs115@115.10.0-1?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

115.*

115.3.0-0ubuntu1

115.4.0-2

115.5.0-1

115.6.0-1

115.7.0-4

115.8.0-1

115.9.0-1

115.9.0-1build1

115.10.0-1

Ubuntu:25.04 / mozjs115

Package

Name: mozjs115
Purl: pkg:deb/ubuntu/mozjs115@115.21.0-1?arch=source&distro=plucky

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

115.*

115.16.0-1

115.17.0-1

115.18.0-1

115.19.0-1

115.20.0-1

115.21.0-1