Creation Date | April 15, 2025 |
Source | Google Chrome Security Bulletin |
Classification:
- Impact: Loss of confidentiality, integrity, availability
- Exploit: Unknown exploit
- Solution: Update
Affected Systems:
- Firefox versions Prior to 137.0.2
Conclusion:
The vulnerability CVE-2025-3608 involves race condition in Firefox’s nsHttpTransaction. A race condition occurs when two processes or threads concurrently access a shared resource, leading to unpredictable behavior. In this case, the race conditions could result in memory corruption, potentially allowing attackers to execute arbitrary code.
Impact:
This vulnerability is classified as high severity. The resulting memory corruption could enable an attacker to compromise the affected system.
References:
- CVE-2025-3608 CVSS score: 8.10
Mozilla Security Advisory:
Solution:
Update to Morilla Firefox 137.0.2
