A vulnerability classified as critical has been found in Mozilla Firefox up to 137.x. This affects an unknown part of the component XPath Parser. The manipulation leads to out-of-bounds read.

This vulnerability is uniquely identified as CVE-2025-4087. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.