Description
Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Published: 2026-10-13
Score: 4.2 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Memory Corruption
Action: Apply Patch
AI Analysis

Impact

Based on the updated description, the vulnerability involves a race condition and use‑after‑free in the Graphics: Text component, potentially leading to memory corruption that could crash the application. The CVSS score of 4.2 indicates limited exploitation potential and no immediate remote code execution path.

Affected Systems

Mozilla Firefox and Mozilla Thunderbird are impacted. All installations of Firefox older than version 158 and all ESR builds older than version 153.5, as well as Thunderbird versions older than 158 and ESR builds older than 153.5, contain the flaw.

Risk and Exploitability

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no widespread exploits have been observed. The low CVSS rating limits the overall risk. A local attacker or one able to supply crafted graphical content could potentially trigger the use‑after‑free, but the data does not suggest a clear remote or web‑based exploitation path.

Generated by OpenCVE AI on October 17, 2026 at 06:36 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Mozilla Firefox to version 158 or later, and update Mozilla Thunderbird to version 158 or ESR 153.5 or later, to apply the vendor‑supplied fix.
  • If an upgrade is not immediately possible, disable hardware acceleration or other graphics features that exercise the vulnerable component to reduce the attack surface.
  • Deploy a sandbox or container for browser processes to contain potential memory corruption or crash effects, and monitor for crashes or abnormal memory usage.
  • Subscribe to Mozilla security advisories and threat feeds to receive updates about any emerging exploits against this flaw.

Generated by OpenCVE AI on October 17, 2026 at 06:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4836-1 firefox-esr security update
Debian DLA Debian DLA DLA-4863-1 thunderbird security update
Debian DSA Debian DSA DSA-6560-1 firefox-esr security update
History

Tue, 13 Oct 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Mozilla
Mozilla firefox
Vendors & Products Mozilla
Mozilla firefox

Tue, 13 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Description Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5. Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
References

Tue, 13 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-362
CWE-416
Metrics cvssV3_1

{'score': 4.2, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 13:00:00 +0000

Type Values Removed Values Added
Description Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.
Title Race condition, use-after-free in the Graphics: Text component
References

Subscriptions

Mozilla Firefox
cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published:

Updated: 2026-10-13T18:17:20.940Z

Reserved: 2026-10-13T00:48:37.689Z

Link: CVE-2026-109765

cve-icon Vulnrichment

Updated: 2026-10-13T14:08:49.792Z

cve-icon NVD

Status : Deferred

Published: 2026-10-13T13:17:27.360

Modified: 2026-10-13T19:18:40.670

Link: CVE-2026-109765

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T06:45:05Z

Weaknesses
  • CWE-362

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

  • CWE-416

    Use After Free