Mozilla Firefox and Firefox ESR Sandbox Escape Vulnerability via Integer Overflow in XPCOM Component

A sandbox escape vulnerability has been identified in Mozilla Firefox versions prior to 149, as well as in Firefox ESR versions prior to 115.34 and prior to 140.9. This vulnerability arises from incorrect boundary conditions and an integer overflow in the XPCOM component, allowing for potential exploitation.

Impact

Exploitation of this vulnerability leads to a sandbox escape, allowing potentially malicious code to be executed outside of its intended environment.

Remediation

Users can upgrade to Firefox 149, Firefox ESR 115.34, or Firefox ESR 140.9 to address this vulnerability.