QwikSec

Security Database

CVE

CWE

Training

CVE-2025-1931

Published: Mar 4, 2025

Modified: Apr 13, 2026

PUBLISHED

Description

It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.

Vendor	Product	Versions
Mozilla	Firefox	unaffected `115.21 - <= 115.` unaffected `128.8 - <= 128.` unaffected `136 - <= *`
Mozilla	Thunderbird	unaffected `128.8 - <= 128.` unaffected `136 - <= `

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1944126

https://www.mozilla.org/security/advisories/mfsa2025-14/

https://www.mozilla.org/security/advisories/mfsa2025-15/

https://www.mozilla.org/security/advisories/mfsa2025-16/

https://www.mozilla.org/security/advisories/mfsa2025-17/

https://www.mozilla.org/security/advisories/mfsa2025-18/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.