A use‑after‑free flaw occurs in the Graphics: ImageLib component of Mozilla Firefox when image data is parsed or rendered. The flaw allows memory to be freed while still in use, potentially permitting execution of arbitrary code inside the browser. The explicit attack vector is not detailed in the source, but the reference to image processing implies that malicious or specially crafted images could trigger the issue; this is inferred from the description.

All Mozilla Firefox builds released before the application of the fix are vulnerable. Firefox 159 and newer, as well as Firefox ESR 115.44 and later ESR releases such as ESR 153.6, contain the correction. Earlier builds and ESR releases lacking these updates remain at risk.

Exploitability data is not publicly available (EPSS not reported, KEV not listed). Inference from the nature of use‑after‑free vulnerabilities suggests a high potential for exploitation in a browser context, but no concrete exploitation reports exist. Consequently, the overall risk for unpatched installations remains high, especially for environments that may load untrusted image data.