Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability in the Graphics: Canvas2D Component

A vulnerability allowing for sandbox escape has been identified in Firefox versions prior to 143, Firefox ESR versions prior to 140.3, Thunderbird versions prior to 143, and Thunderbird ESR versions prior to 140.3. This vulnerability arises from undefined behavior and invalid pointer usage, which could potentially be exploited to escape the sandbox environment.

Impact

Exploitation of this vulnerability leads to a sandbox escape, allowing for unauthorized actions or access outside the intended restrictions of the application.

Remediation

Users can upgrade to Firefox 143, Firefox ESR 140.3, Thunderbird 143, or Thunderbird ESR 140.3 to address this vulnerability.