Integer overflow in the Graphics component
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.7%
exploitation probability
0.7%top 50% of all CVEs
observed exploitation
nono source reports it
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
https://bugzilla.mozilla.org/show_bug.cgi?id=2053327https://www.mozilla.org/security/advisories/mfsa2026-74/https://www.mozilla.org/security/advisories/mfsa2026-76/https://www.mozilla.org/security/advisories/mfsa2026-77/https://www.mozilla.org/security/advisories/mfsa2026-78/https://www.mozilla.org/security/advisories/mfsa2026-79/https://www.mozilla.org/security/advisories/mfsa2026-80/