The vulnerability is a flaw in the Graphics: WebGPU component of Mozilla applications that involves uninitialized memory. Based on the description, it is inferred that the bug could lead to unintended disclosure of data or application instability. This weakness matches CWE‑457, which permits the use of memory that has not been initialized.

Mozilla Firefox and Mozilla Thunderbird are affected. All builds older than version 157 contain the uninitialized memory flaw; versions 157 and later have the WebGPU component patched. Users operating with Firefox or Thunderbird earlier than these patch releases are at risk.

The CVE grants a CVSS score of 4.3 and an EPSS score below 1 %, indicating a low likelihood of exploitation. The vulnerability is not listed in CISA's KEV catalog. Based on the description, it is inferred that attackers would likely need to supply malicious web content that activates WebGPU in a context where the uninitialized memory can be accessed, implying a local or privileged web‑content vector. The limited exploitation information and low EPSS suggest that the risk is modest, but updates should be applied promptly.