CVEs-PoC/2025/CVE-2025-1009.md

CVE-2025-1009

Description

An attacker could have caused a use-after-free via crafted XSLT data, leading to a potentially exploitable crash. This vulnerability affects Firefox < 135, Firefox ESR < 115.20, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

POC

Reference

• https://bugzilla.mozilla.org/show_bug.cgi?id=1936613

Github

• https://github.com/w4zu/Debian_security