This vulnerability is a use‑after‑free bug in the Canvas2D component of Mozilla’s graphics engine, classified as CWE‑416. A maliciously crafted drawing command can trigger the deallocation logic to use memory that has already been freed, causing memory corruption. While the CVE description does not confirm that execution of arbitrary code is guaranteed, such corruption could potentially lead to code execution within the application process if an attacker successfully controls the freed memory layout.

Mozilla Firefox users running versions earlier than 158, and the Firefox Extended Support Release up to 153.5, are susceptible. Mozilla Thunderbird users running versions earlier than 158, and the Thunderbird Extended Support Release up to 153.5, are also affected. Any instance that renders graphics via the Canvas2D component is at risk until a software update is applied.

The CVSS score of 5.4 indicates a moderate severity. No EPSS score is available and the issue is not listed in the CISA KEV catalog, meaning no widespread exploitation has been documented. The flaw can be triggered by normal web content presented to the browser, and although concrete exploits are not publicly reported, the possibility of memory corruption and its potential to lead to code execution warrants proactive patching.