Back to search
CVE-2025-12380
Published: Oct 28, 2025
Modified: Apr 13, 2026
PUBLISHED
Description
Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.
| Vendor | Product | Versions |
|---|---|---|
Mozilla | Firefox | unaffected 144.0.2 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now