CVE-2025-4087

CVE-2025-4087 is a medium-severity vulnerability in Mozilla Firefox and Thunderbird, affecting versions prior to 138 and 128.10 respectively. It stems from missing null checks during XPath parsing, leading to potential out-of-bounds read access and memory corruption. The attack vector is network-based with high attack complexity, potentially resulting in low impact to confidentiality and integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.