FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Firefox -- use-after-free in the GPU or browser process

Affected packages
		firefox	<	144.0.2,2

Details

VuXML ID	291773e6-b5b2-11f0-8f61-b42e991fc52e
Discovery	2025-10-28
Entry	2025-10-30

https://bugzilla.mozilla.org/show_bug.cgi?id=1993113 reports:

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox.

[source]

References

CVE Name	CVE-2025-12380
URL	https://cveawg.mitre.org/api/cve/CVE-2025-12380