Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability in the Graphics: Canvas2D Component

A use-after-free vulnerability has been identified in the Graphics: Canvas2D component of Mozilla Firefox and Thunderbird. This vulnerability creates a sandbox escape, allowing potentially harmful actions to be performed outside of the intended security boundaries. It affects Firefox versions prior to 143, Firefox ESR versions prior to 140.3, Thunderbird versions prior to 143, and Thunderbird ESR versions prior to 140.3.

Impact

Exploitation of this vulnerability leads to a sandbox escape, allowing code to be executed outside of the application's security restrictions.

Remediation

Users can upgrade to Firefox 143, Firefox ESR 140.3, Thunderbird 143, or Thunderbird ESR 140.3 to address this vulnerability.