The vulnerability stems from incorrect boundary conditions in the Graphics: Canvas2D component. The defect is a classic boundary check failure (CWE-119) where input data to the rendering engine is not properly validated against allocated memory limits. Based on the description, it is inferred that malformed data processed by the component could lead to a browser crash or other service interruption.

Mozilla Firefox versions earlier than 158, all releases on the Extended Support Release (ESR) branch up to and including 153.5, and Mozilla Thunderbird versions earlier than 158, including all ESR releases up to and including 153.5. The issue is remedied in Firefox 158, ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

The flaw is tied to rendering operations performed by web pages. Based on the description, it is inferred that an attacker could trigger the vulnerability by delivering maliciously crafted content that is rendered by the Canvas2D component. The EPSS score of <1% indicates a very low but non-zero probability of exploitation. The vulnerability is not listed in the CISA KEV catalog, suggesting no known active exploitation. The CVSS score of 5.4 indicates a moderate severity that may potentially lead to denial of service via crashes.