Mozilla Firefox and Firefox ESR Sandbox Escape Vulnerability in WebGL Component

A sandbox escape vulnerability has been identified in Mozilla Firefox versions prior to 146, as well as in Firefox ESR versions prior to 115.31 and prior to 140.6. This vulnerability arises from incorrect boundary conditions in the Graphics: CanvasWebGL component, allowing for potential exploitation.

Impact

Exploitation of this vulnerability leads to a sandbox escape, allowing potentially malicious content to break out of its restricted environment and interact with the broader system or application.

Remediation

Users can upgrade to Firefox 146 or Firefox ESR 115.31 or 140.6 to address this vulnerability.