Mozilla Firefox up to 143 GetInstance use after free

Summaryinfo

A vulnerability marked as critical has been reported in Mozilla Firefox up to 143. This issue affects the function MediaTrackGraphImpl::GetInstance. This manipulation causes use after free. This vulnerability is registered as CVE-2025-11708. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in Mozilla Firefox up to 143. It has been declared as critical. Affected by this vulnerability is the function MediaTrackGraphImpl::GetInstance. The manipulation with an unknown input leads to a use after free vulnerability. The CWE definition for the vulnerability is CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Use-after-free in MediaTrackGraphImpl::GetInstance() This vulnerability affects Firefox < 144, Firefox ESR < 140.4, Thunderbird < 144, and Thunderbird < 140.4.

It is possible to read the advisory at bugzilla.mozilla.org. This vulnerability is known as CVE-2025-11708 since 10/13/2025. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 11/16/2025).

The vulnerability scanner Nessus provides a plugin with the ID 270625 (Debian dsa-6025 : firefox-esr - security update), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 144 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (270625) and CERT Bund (WID-SEC-2025-2275). Be aware that VulDB is the high quality source for vulnerability data.

Affected

• Debian Linux
• Amazon Linux 2
• Red Hat Enterprise Linux
• SUSE Linux
• Oracle Linux
• SUSE openSUSE
• RESF Rocky Linux
• IGEL OS
• Mozilla Firefox
• Mozilla Firefox ESR
• Mozilla Thunderbird

Productinfo

Type

• Web Browser

Vendor

• Mozilla

Name

• Firefox

Version

• 143

License

• open-source

Website

• Vendor: https://www.mozilla.org/
• Product: https://www.mozilla.org/en-US/firefox/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion