Memory safety bugs were found in Firefox version 150.0.1. The bugs lead to memory corruption that could, with sufficient effort, allow an attacker to execute arbitrary code. The weakness is a buffer overflow (CWE-119) that can corrupt program state. Successful exploitation would give an attacker control over the browser process and could be used to compromise the host system.

Mozilla Firefox is affected, specifically the 150.0.1 release. Versions 150.0.2 and later contain the patch that eliminates the vulnerabilities. No other versions are explicitly mentioned, so earlier or newer releases without the fix could remain vulnerable until updated.

The CVSS score is 7.5, indicating moderate to high severity. The EPSS score is not available, so the likelihood of exploitation is unknown. The vulnerability is not listed in CISA's KEV catalog, suggesting no known public exploits. The most likely attack vector involves an attacker delivering crafted web content or a malicious website to a user browsing with the vulnerable Firefox version. If the bug can be reliably triggered, an attacker could gain arbitrary code execution in the browser context, potentially escalating to full system compromise.