Mozilla Firefox and Firefox ESR JIT Miscompilation Vulnerability

A Just-In-Time (JIT) miscompilation vulnerability has been identified in the JavaScript engine of Mozilla Firefox. This issue affects Firefox versions prior to 149, as well as Firefox Extended Support Release (ESR) versions prior to 115.34 and prior to 140.9. The vulnerability arises from incorrect optimizations in the JIT compilation process, which could potentially be exploited to disrupt the normal execution of JavaScript code.

Impact

Exploitation of this vulnerability leads to a JIT miscompilation, which can cause incorrect program behavior and potentially be exploited to execute arbitrary code.

Remediation

Users can upgrade to Firefox 149, Firefox ESR 115.34, or Firefox ESR 140.9 to address this vulnerability.