CVE-2025-12380 | BDVDB-2026-299778 Detail

Description#

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-10-28Record published in the CVE List.
2. Version 22026-08-05Most recent update recorded in the CVE List.