CVE-2025-10533: 
NixOS vulnerability analysis and mitigation

CVE-2025-10533 is an integer overflow vulnerability discovered in the SVG component of Mozilla Firefox and related products. The vulnerability was reported by security researcher Andrew Creskey and was disclosed on September 16, 2025. The affected products include Firefox ESR 140.3, Firefox ESR 115.28, Firefox 143, Thunderbird 143, and Thunderbird 140.3 (Mozilla Advisory).

The vulnerability is classified as a moderate severity issue affecting the SVG (Scalable Vector Graphics) component of Firefox browsers and Thunderbird email clients. The technical details are limited in the public advisories, but it has been confirmed as an integer overflow vulnerability that could potentially affect the processing of SVG content (Mozilla Advisory).

The vulnerability has been assessed with a moderate impact rating by Mozilla. While specific exploit scenarios are not detailed in the public advisories, integer overflow vulnerabilities can potentially lead to memory corruption or other unexpected behavior in the application (Mozilla Advisory).

Mozilla has addressed this vulnerability in Firefox ESR 140.3, Firefox ESR 115.28, Firefox 143, Thunderbird 143, and Thunderbird 140.3. Users are advised to update their installations to these versions or later to receive the security fix (Mozilla Advisory).