This vulnerability allows an attacker to escape the browser sandbox because the Networking component does not correctly enforce boundary conditions. The flaw leads to memory corruption that can be exploited to run code with the privileges of the browser process, effectively turning the compromised browser into a foothold for further attacks.

Mozilla Firefox instances prior to version 158 on non‑ESR and before version 153.5 on the ESR branch are affected. All supported operating systems that ship these versions are at risk.

Exploit availability data is not reported and the vulnerability is not listed in the CISA KEV catalog, but the impact of a sandbox escape is severe. Without a public exploit the EPSS score is unavailable; however, the CVE description indicates the flaw is serious enough to warrant immediate patching, and mitigation requires installing the official fix.