CVE-2025-4920 The advisory has been revoked - it doesn't affect any version of package firefox-esr (opens in a new tab)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-DEBIAN12-FIREFOXESR-10181820
- published18 May 2025
- disclosed17 May 2025
Introduced: 17 May 2025
NewCVE-2025-4920 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Amendment
The Debian security team deemed this advisory irrelevant for Debian:12.
NVD Description
Note: Versions mentioned in the description apply only to the upstream firefox-esr package and not the firefox-esr package as distributed by Debian.
Rejected reason: Duplicate of CVE-2025-4918