CVE-2025-8028

Description

On arm64, a WASM `br_table` instruction with a lot of entries could lead to the label being too far from the instruction causing truncation and incorrect computation of the branch address. This vulnerability affects Firefox < 141, Firefox ESR < 115.26, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

Reserved 2025-07-22 | Published 2025-07-22 | Updated 2025-07-22 | Assigner mozilla

Problem types

Large branch table could lead to truncated instruction

Product status

Any version before 141
affected

Any version before 115.26
affected

Any version before 128.13
affected

Any version before 140.1
affected

Any version before 141
affected

Any version before 128.13
affected

Any version before 140.1
affected

Credits

Gary Kwong

References

bugzilla.mozilla.org/show_bug.cgi?id=1971581

www.mozilla.org/security/advisories/mfsa2025-56/

www.mozilla.org/security/advisories/mfsa2025-57/

www.mozilla.org/security/advisories/mfsa2025-58/

www.mozilla.org/security/advisories/mfsa2025-59/

www.mozilla.org/security/advisories/mfsa2025-61/

www.mozilla.org/security/advisories/mfsa2025-62/

www.mozilla.org/security/advisories/mfsa2025-63/

cve.org (CVE-2025-8028)

nvd.nist.gov (CVE-2025-8028)

Download JSON