Mozilla Firefox and Firefox ESR Sandbox Escape Vulnerability

A sandbox escape vulnerability has been identified in Mozilla Firefox versions prior to 147, as well as in Firefox ESR versions prior to 115.32 and prior to 140.7. This vulnerability arises from incorrect boundary conditions in the Graphics component, which could potentially be exploited to escape the sandbox environment and execute unauthorized actions or access restricted resources.

Impact

Exploitation of this vulnerability allows for a sandbox escape, enabling potentially malicious actions or access to restricted resources that are normally protected by the sandbox environment.

Remediation

Users can upgrade to Firefox 147 or Firefox ESR 115.32 or 140.7 to address this vulnerability.