TI-2025-08416 CVE-2025-9179 · GHSA-7379-6rf2-q4f9
Sandbox escape due to invalid pointer in the Audio/Video: GMP component
Priority MEDIUM 50
An attacker was able to perform memory corruption in the GMP process which processes encrypted media.
thunderbird security update
Released 2025-08-28 · Red Hat rating Important · View on Red Hat →
An attacker was able to perform memory corruption in the GMP process which processes encrypted media.
Denial-of-service due to out-of-memory in the Graphics: WebRender component.
Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141.
Same-origin policy bypass in the Graphics: Canvas2D component.
Uninitialized memory in the JavaScript Engine component.