This flaw in the Graphics component allows an attacker to gain elevated privileges through incorrect boundary checks. The vulnerability can cause memory to be written outside expected limits, potentially enabling execution of arbitrary code or escalation of privileges within the browser process. Because the description does not detail the exact exploitation path, the inference is that it involves an out‑of‑bounds memory operation that could be leveraged by a malicious web page or local attacker to elevate rights.

The affected product is Mozilla Firefox. The fix is already present in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. Therefore, any versions of Firefox earlier than these releases are likely vulnerable. No other vendors or product lines are mentioned.

The CVSS score of 8.8 indicates a high severity vulnerability, and the EPSS score is unavailable, so the precise likelihood of exploitation remains uncertain. The vulnerability was not listed in CISA’s KEV catalog, indicating no publicly known exploitation at the time of this analysis. However, privilege‑escalation flaws typically carry high severity, and an attacker capable of triggering the boundary condition could potentially compromise the system. The attack vector is inferred to be local or web‑based, requiring the execution of a crafted graphics request to exploit the flaw.