CVE-2025-4090

Summary

A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

Affected Software

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1929478
• https://www.mozilla.org/security/advisories/mfsa2025-28/
• https://www.mozilla.org/security/advisories/mfsa2025-31/

• ←Previous
• Next→