The vulnerability is an information disclosure flaw in the Graphics: WebGPU component of Mozilla products, allowing data to be read from GPU memory. This can expose user information or sensitive graphics data and directly compromises confidentiality.

Mozilla Firefox and Thunderbird versions prior to 151 are vulnerable; the issue was addressed in version 151 for both products.

The EPSS score is 0.00017 (<1%) and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector involves a malicious web page or injected code that uses the WebGPU API to access memory, though no public exploit is known. The risk level should be considered moderate, but it is critical for environments that rely heavily on GPU workloads.