The vulnerability is a use‑after‑free bug (CWE‑416) in the Graphics: Canvas2D component, also involving improper memory management (CWE‑825). The description lists the releases in which the issue is fixed, namely Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. When an object is freed and subsequently accessed, an attacker could trigger memory corruption that may lead to arbitrary code execution or a crash, compromising the confidentiality or integrity of data rendered via canvas on malicious web pages.

The flaw affects Mozilla Firefox browsers and Mozilla Thunderbird mail clients. Users running any release prior to Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, or Firefox ESR 140.17 are impacted, as are users of Thunderbird versions earlier than 157, 140.17, or 153.4.

An EPSS score of < 1% indicates a very low but nonzero probability of exploitation. The data also shows that it is not listed in the KEV catalog. The description indicates a use‑after‑free in a core graphics component, so the attack would likely involve a malicious web page that uses Canvas2D to trigger the fault. The CVSS score of 8.8 categorizes this flaw as high severity, indicating that it can lead to remote code execution or denial of service if the attacker can influence the canvas content.