CVE-2025-11721 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-11721 Interim 1 3 2026-03-05T01:26:17Z current 2025-11-01T00:59:42Z 2026-03-05T01:26:17Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-11721 Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 144 and Thunderbird < 144. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 openSUSE Tumbleweed MozillaFirefox MozillaFirefox-144.0-1.1 MozillaFirefox-branding-upstream-144.0-1.1 MozillaFirefox-devel MozillaFirefox-devel-144.0-1.1 MozillaFirefox-translations-common MozillaFirefox-translations-common-144.0-1.1 MozillaFirefox-translations-other MozillaFirefox-translations-other-144.0-1.1 MozillaThunderbird MozillaThunderbird-translations-common MozillaThunderbird-translations-other MozillaFirefox-144.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-branding-upstream-144.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-devel-144.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-common-144.0-1.1 as a component of openSUSE Tumbleweed MozillaFirefox-translations-other-144.0-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP4 LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 16.0 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP applications 16.0 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP applications 16.0 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP applications 16.0 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server for SAP applications 16.0 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird as a component of openSUSE Leap 15.6 MozillaThunderbird-translations-common as a component of openSUSE Leap 15.6 MozillaThunderbird-translations-other as a component of openSUSE Leap 15.6 Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 144 and Thunderbird < 144. CVE-2025-11721 openSUSE Tumbleweed:MozillaFirefox-144.0-1.1 openSUSE Tumbleweed:MozillaFirefox-branding-upstream-144.0-1.1 openSUSE Tumbleweed:MozillaFirefox-devel-144.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-common-144.0-1.1 openSUSE Tumbleweed:MozillaFirefox-translations-other-144.0-1.1 critical 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H