Use‑after‑free vulnerabilities occur when memory is accessed after it has been freed, leading to memory corruption. In this case the flaw resides in the Panning and Zooming component of Firefox and was addressed in version 159 and ESR 153.6. The defect could allow an attacker to corrupt memory, resulting in a browser crash or establishing a foothold for advanced exploits such as arbitrary code execution.

Mozilla Firefox is affected. Versions of the mainstream release older than 159 and the ESR release older than 153.6 contain the flaw. Users of those releases are advised to update to the fixed versions.

No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Although a CVSS score is not provided, use‑after‑free flaws that can lead to code execution typically carry high severity. The likely attack vector is local or remote and would involve loading malicious content— for example, a crafted web page or a malicious extension—that triggers the vulnerable component. Successful exploitation could corrupt memory, crash Firefox, or potentially execute attacker‑supplied code.