The CVE describes a buffer overflow in the NSS libraries, identified as CWE‑119 and CWE‑676. This flaw can corrupt memory and potentially allow an attacker to execute arbitrary code or cause other unintended behavior. The CVSS score of 5.3 classifies the risk as moderate.

Mozilla Firefox and Thunderbird are affected. All releases prior to Firefox 150, ESR 115.35, and ESR 140.10, as well as all releases prior to Thunderbird 150 and 140.10 contain the vulnerability. The fixes were applied in the specified newer versions, so only earlier builds are vulnerable.

The CVSS score indicates a moderate severity, yet the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The attack vector is not explicitly described, but given the nature of the flaw it could be leveraged by an attacker through an NSS library exploit, potentially remotely if the library is used in network services. Overall, the risk level remains uncertain but should be considered moderate pending further information.