Description
An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability affects Firefox < 142, Firefox ESR < 115.27, Firefox ESR < 128.14, Firefox ESR < 140.2, Thunderbird < 142, Thunderbird < 128.14, and Thunderbird < 140.2.
Problem types
Sandbox escape due to invalid pointer in the Audio/Video: GMP component
Product status
Credits
Oskar
References
bugzilla.mozilla.org/show_bug.cgi?id=1979527
www.mozilla.org/security/advisories/mfsa2025-64/
www.mozilla.org/security/advisories/mfsa2025-65/
www.mozilla.org/security/advisories/mfsa2025-66/
www.mozilla.org/security/advisories/mfsa2025-67/
www.mozilla.org/security/advisories/mfsa2025-70/
www.mozilla.org/security/advisories/mfsa2025-71/
www.mozilla.org/security/advisories/mfsa2025-72/
