Impact
The vulnerability is a race condition in the IPC component of Mozilla Firefox. The race condition can lead to unexpected behavior, including crashes or inconsistent data handling, which may allow an attacker to cause a denial of service or compromise application stability. The weakness is a classic race condition affecting shared resources; specific outcomes depend on how the IPC component is used in applications.
Affected Systems
Mozilla Firefox is affected. Versions prior to 159 and Firefox ESR prior to 153.6 contain the race condition. It was fixed starting with Firefox 159 and ESR 153.6, so any earlier build remains vulnerable.
Risk and Exploitability
The official EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. No CVSS score is provided, so the severity cannot be quantified here. Based on the race condition nature, exploitation would likely require a scenario where the attacker can trigger concurrent IPC operations, possibly from a local user or a privileged application. The attack vector is inferred to be local or remote depending on the accessibility of the IPC interface, but the description does not specify an exact vector or step-by-step exploitation process.
OpenCVE Enrichment