CVE-2025-9182: 
Mozilla Firefox vulnerability analysis and mitigation

CVE-2025-9182 is a denial-of-service vulnerability discovered in the Graphics: WebRender component of Mozilla Firefox and Thunderbird. The vulnerability was reported by Irvan Kurniawan and disclosed on August 19, 2025. This security issue affects multiple versions of Mozilla products including Firefox < 142, Firefox ESR < 140.2, Thunderbird < 142, and Thunderbird < 140.2 (Mozilla Advisory, NVD).

The vulnerability is characterized as an out-of-memory condition in the Graphics: WebRender component. It has been assigned a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue has been classified under CWE-400 (Uncontrolled Resource Consumption) (NVD).

The vulnerability has been assessed with a low impact rating by Mozilla. When exploited, it can cause a denial-of-service condition by triggering an out-of-memory state in the WebRender component, potentially affecting the availability of the application (Mozilla Advisory).

The vulnerability has been patched in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird ESR 140.2. Users are advised to upgrade to these versions or later to mitigate the vulnerability (Mozilla Advisory).