PatchGap
Firefox · SpiderMonkey

CVE-2025-1011

Logic Error in SpiderMonkey
Medium firefox Logic Error 🔧 Commit mapped

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionA bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution.
ComponentSpiderMonkey
Bug ClassLogic Error
Tracker1936454
Fix commite575212ce11b (firefox) +0/-1
CISA KEVNot listed
CreditedNan Wang
Disclosed2025-02-04

Files Changed

  • js/src/jit/MIROps.yaml

Patch

view commit
diff --git a/js/src/jit/MIROps.yaml b/js/src/jit/MIROps.yaml
index e450b90788d..7d175b8601b 100644
--- a/js/src/jit/MIROps.yaml
+++ b/js/src/jit/MIROps.yaml
@@ -736,7 +736,6 @@
     wideningOp: wasm::FieldWideningOp
   type_policy: none
   result_type: Int32
-  movable: true
   congruent_to: if_operands_equal
   alias_set: none
Loading diff…
On This Page