Mozilla Firefox Graphics Component Integer Overflow Vulnerability

A vulnerability has been identified in the Graphics component of Mozilla Firefox, specifically in versions prior to 149, as well as in Firefox ESR versions prior to 115.34 and 140.9. This vulnerability arises from incorrect boundary conditions leading to an integer overflow.

Impact

Exploitation of this vulnerability causes a sandbox escape, allowing an attacker to break out of a restricted execution environment and potentially execute arbitrary code or perform unauthorized actions.

Remediation

Users can upgrade to Firefox 149, Firefox ESR 115.34, or Firefox ESR 140.9 to address this vulnerability.