Mozilla Product Security Update Advisory

Overview

 

We have released security updates to fix vulnerabilities in Mozilla products. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-11152, CVE-2025-11153

 

Firefox Versions: 143.0.3 and earlier

 

 

Resolved Vulnerabilities

 

Sandbox escape vulnerability due to an integer overflow in Graphics Canvas2D (CVE-2025-11152)
JIT miscompilation vulnerability in the JavaScript engine (CVE-2025-11153)

 

Vulnerability Patches

Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-11152, CVE-2025-11153

 

Firefox version: 143.0.3

 

 

References

 

[1] Mozilla Foundation Security Advisory 2025-80
https://www.mozilla.org/en-US/security/advisories/mfsa2025-80/