7.5HIGH

CVE-2025-9182 — Denial-of-service due to out-of-memory in the Graphics: WebRender component.

Mozilla · Firefox · Published 19 Aug 2025 · Modified 30 Sept 2026

Description

Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1975837
https://www.mozilla.org/security/advisories/mfsa2025-64/
https://www.mozilla.org/security/advisories/mfsa2025-67/
https://www.mozilla.org/security/advisories/mfsa2025-70/
https://www.mozilla.org/security/advisories/mfsa2025-72/

What to do

Check whether Firefox is in your asset inventory.
Patch in the next maintenance window; prioritise internet-facing systems.
Record the decision in your risk register for audit evidence.

Alert me on similar CVEs →

Link: adminadda.com/cve/CVE-2025-9182