Memory safety bugs were found in Firefox ESR 115.35.1, Firefox ESR 140.10.1 and Firefox 150.0.1. The bugs could trigger memory corruption that, with sufficient effort, might enable an attacker to run arbitrary code in the context of the browser. The description indicates evidence of memory corruption, and it is inferred that exploiting the vulnerability would allow execution of code on the affected system.

Affected products include Mozilla Firefox ESR 115.35.1, Mozilla Firefox ESR 140.10.1 and Mozilla Firefox 150.0.1. The fix is available in the upgraded releases Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefox 150.0.2.

No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, so current exploitation data is limited. Nonetheless, the potential for arbitrary code execution represents a high severity risk for users running the affected browsers, especially when processing untrusted web content. The attack vector is likely through content that exploits the memory corruption during rendering or processing, though specific exploitation reports are not yet documented.