PatchGap
Firefox · SpiderMonkey

CVE-2025-13027

Memory Corruption in SpiderMonkey
High firefox Memory Corruption 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impacthigh
DescriptionMemory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
ComponentSpiderMonkey
Bug ClassMemory Corruption
Tracker1987237
Fix commit0e97ad658071 (firefox) +0/-1
CISA KEVNot listed
CreditedThe Mozilla Fuzzing Team
Disclosed2025-11-11

Files Changed

  • js/src/jit/WarpCacheIRTranspiler.cpp

Patch

view commit
diff --git a/js/src/jit/WarpCacheIRTranspiler.cpp b/js/src/jit/WarpCacheIRTranspiler.cpp
index ea450022730..e1eebf8fc85 100644
--- a/js/src/jit/WarpCacheIRTranspiler.cpp
+++ b/js/src/jit/WarpCacheIRTranspiler.cpp
@@ -358,7 +358,6 @@ bool WarpCacheIRTranspiler::transpile(
 #undef DEFINE_OP
 
       default:
-        fprintf(stderr, "Unsupported op: %s\n", CacheIROpNames[size_t(op)]);
         MOZ_CRASH("Unsupported op");
     }
   } while (reader.more());
Loading diff…
On This Page