CVE-2025-13025: 
NixOS vulnerability analysis and mitigation

CVE-2025-13025 is a security vulnerability discovered in the Graphics: WebGPU component affecting Firefox versions below 145 and Thunderbird versions below 145. The vulnerability was disclosed on November 11, 2025, and was reported by security researcher Oskar L (Mozilla Advisory).

The vulnerability stems from incorrect boundary conditions in the Graphics: WebGPU component. It has been assigned a CVSS 3.1 base score of 7.5 (High), with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N. The vulnerability is classified under CWE-276 (Incorrect Default Permissions) (NVD).

The vulnerability has been rated as high impact. According to the CVSS scoring, it requires no privileges or user interaction to exploit, can be accessed from the network, and potentially allows for integrity compromise while maintaining unchanged scope. The vulnerability does not affect confidentiality or availability (Ubuntu).

The vulnerability has been fixed in Firefox version 145 and Thunderbird version 145. Users are advised to update their software to these versions or later to mitigate the risk (Mozilla Advisory).