The vulnerability is caused by an integer overflow in the Graphics: Canvas2D component of Firefox, which allows an attacker to escape the browser sandbox. The overflow can corrupt memory bounds and enable the execution of arbitrary code with elevated privileges, effectively compromising the victim's system. This flaw is classified as CWE‑190 (Integer Overflow).

Mozilla Firefox users running any release earlier than 143.0.3 are potentially affected by this sandbox escape. The fix was applied in Firefox 143.0.3, so all versions 143.0.0 to 142.x and earlier are vulnerable unless otherwise patched.

The CVSS score of 8.6 indicates a high severity, and the EPSS score of less than 1% suggests a low, though nonzero, exploitation probability at the time of analysis. The flaw is not currently listed in CISA's KEV catalog. Based on the description, the likely attack vector involves an attacker supplying malicious JavaScript or crafted content that triggers the overflow within the Canvas2D rendering path, leading to sandbox escape and code execution.