Integer overflow in the Graphics component can corrupt memory during image rendering. Based on the description, it is inferred that an attacker could exploit the overflow to cause denial of service or trigger memory corruption.

The vulnerability affects Mozilla Firefox versions prior to 158, Firefox ESR 115.43, and Firefox ESR 153.5, as well as Mozilla Thunderbird versions prior to 158 and Thunderbird ESR 115.43 and 153.5. Only these releases are susceptible; newer or patched releases contain the fix.

No publicly known exploit references exist, and the EPSS score is unavailable, so the exact likelihood of exploitation is unknown. However, the severity of an integer overflow that can corrupt memory is high. The vulnerability is not listed in the CISA KEV catalog, indicating no confirmed widespread exploitation at this time. The risk assessment therefore recommends proactive mitigation through patching rather than waiting for evidence of exploitation.