The flaw is a use‑after‑free in the Canvas2D component of a browser’s graphics engine. The description confirms that the bug can lead to memory corruption. While the advisory does not detail the exact attack outcome, such vulnerabilities typically allow an attacker to execute arbitrary code or crash the rendering process. The lack of explicit detail means the exact attacker benefit is inferred from the nature of the defect rather than stated.

Mozilla Firefox ESR releases prior to ESR 153.4, ESR 115.42, and ESR 140.17 are affected. The Canvas2D fix was applied in these ESR versions, so earlier ESR releases remain vulnerable on all supported platforms. Thunderbird releases prior to 140.17 and 153.4 also lack the patch and are therefore vulnerable.

With a CVSS score of 8.8, the flaw is considered high severity. The EPSS score is less than 1%, indicating a low exploitation probability. It is not listed in the CISA KEV catalog, so there is no evidence of active exploitation. An attacker could potentially trigger the use‑after‑free by delivering malicious content such as crafted canvas elements or scripts to the affected application. Defensive measures like sandboxing or disabling canvas usage can mitigate risk.