This vulnerability allows an attacker to trigger a denial‑of‑service condition within the WebRTC module of Mozilla Firefox. An exploit can cause the browser to consume excessive resources or crash, rendering the user’s browser unresponsive. The weakness is a classic uncontrolled resource consumption flaw, reflected by CWE‑400.

Mozilla Firefox users on any version before 158, and on Firefox ESR before 153.5, are affected. The issue is confined to the WebRTC component bundled with these releases.

The CVSS score and EPSS are not available, and the vulnerability is not listed in the CISA KEV catalog, indicating limited publicly documented exploitation. The likely attack vector is a remote attacker sending malicious WebRTC packets to a victim’s browser. Because no exploitation conditions are reported, the risk is moderate, but the impact of a DoS can be significant for users relying on the browser for critical tasks.