CVE-2025-5262 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-5262 Interim 1 9 2025-09-22T08:09:03Z current 2025-05-27T23:15:36Z 2025-09-22T08:09:03Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-5262 A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 139 and Thunderbird < 128.11. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2025-June/040281.html E-Mail link for SUSE-SU-2025:01946-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TEMWQQR3WLN7ACI6LZQ7KQO5GLIQ3HLM/ E-Mail link for openSUSE-SU-2025:15174-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 openSUSE Leap 15.6 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-devel MozillaFirefox-translations-common MozillaFirefox-translations-other MozillaThunderbird-128.11.0-1.1 MozillaThunderbird-128.11.0-150200.8.221.1 MozillaThunderbird-openpgp-librnp-128.11.0-1.1 MozillaThunderbird-translations-common-128.11.0-1.1 MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 MozillaThunderbird-translations-other-128.11.0-1.1 MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 firefox-esr-128.11.0-1.1 firefox-esr-branding-upstream-128.11.0-1.1 firefox-esr-translations-common-128.11.0-1.1 firefox-esr-translations-other-128.11.0-1.1 MozillaThunderbird-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 MozillaThunderbird-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-128.11.0-150200.8.221.1 as a component of openSUSE Leap 15.6 MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 as a component of openSUSE Leap 15.6 MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 as a component of openSUSE Leap 15.6 MozillaThunderbird-128.11.0-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-openpgp-librnp-128.11.0-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-translations-common-128.11.0-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird-translations-other-128.11.0-1.1 as a component of openSUSE Tumbleweed firefox-esr-128.11.0-1.1 as a component of openSUSE Tumbleweed firefox-esr-branding-upstream-128.11.0-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-common-128.11.0-1.1 as a component of openSUSE Tumbleweed firefox-esr-translations-other-128.11.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP4 LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15-LTSS A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 139 and Thunderbird < 128.11. CVE-2025-5262 SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-128.11.0-150200.8.221.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-128.11.0-150200.8.221.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-128.11.0-150200.8.221.1 SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-128.11.0-150200.8.221.1 SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 openSUSE Leap 15.6:MozillaThunderbird-128.11.0-150200.8.221.1 openSUSE Leap 15.6:MozillaThunderbird-translations-common-128.11.0-150200.8.221.1 openSUSE Leap 15.6:MozillaThunderbird-translations-other-128.11.0-150200.8.221.1 openSUSE Tumbleweed:MozillaThunderbird-128.11.0-1.1 openSUSE Tumbleweed:MozillaThunderbird-openpgp-librnp-128.11.0-1.1 openSUSE Tumbleweed:MozillaThunderbird-translations-common-128.11.0-1.1 openSUSE Tumbleweed:MozillaThunderbird-translations-other-128.11.0-1.1 openSUSE Tumbleweed:firefox-esr-128.11.0-1.1 openSUSE Tumbleweed:firefox-esr-branding-upstream-128.11.0-1.1 openSUSE Tumbleweed:firefox-esr-translations-common-128.11.0-1.1 openSUSE Tumbleweed:firefox-esr-translations-other-128.11.0-1.1 important