RHSA-2025:16109: CVEs fixed (Red Hat)

RHSA-2025:16109 fixes 5 tracked CVEs. Affected systems and fixed versions.

CVE-2025-10532 MEDIUM 6.5 UPGRADE UPGRADE Incorrect boundary conditions in the JavaScript: GC component
CVE-2025-10533 HIGH 8.8 UPGRADE UPGRADE Integer overflow in the SVG component
CVE-2025-10528 HIGH 7.3 UPGRADE UPGRADE Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
CVE-2025-10537 HIGH 8.8 UPGRADE UPGRADE Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142
CVE-2025-10529 MEDIUM 6.5 UPGRADE UPGRADE Same-origin policy bypass in the Layout component

Applies to