← Database

CVE-2025-1942

CRITICAL CVSS: 9.8 Published: 2025-03-04 Modified: 2026-06-17

Description

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

CWE-908

References