The vulnerability is an unspecified issue in the SVG component of Mozilla Firefox (and Thunderbird) that was fixed in version 159. While the precise mechanism is not disclosed, it is inferred that the issue may lead to crashes or other unexpected behavior during the parsing of malicious SVG content. Because the description lacks detail, the exact impact remains uncertain.

All users running Mozilla Firefox or Mozilla Thunderbird versions prior to 159 are affected. The issue is limited to the SVG processing component of each application and does not directly affect other subsystems.

No CVSS or EPSS scores are available, and the vulnerability is not listed in the CISA KEV catalog, so the likelihood of exploitation remains uncertain. The likely attack vector would involve an attacker supplying a malicious SVG file that a user opens or navigates to, which is then processed by the vulnerable component. With no publicly disclosed exploit, the threat level is undetermined until further technical details emerge.