The vulnerability is an information disclosure flaw in the Graphics: WebGPU component of Firefox. It allows a malicious website or injected content to read private data stored in the GPU memory, potentially exposing user information or sensitive graphics data. This weakness directly compromises confidentiality and is classified as a data‑exposure issue.

The affected product is Mozilla Firefox. No specific version range is provided in the CNA data, but the issue was addressed in Firefox 151, implying that versions prior to 151 are vulnerable.

Explicit exploitation metrics are not available; the EPSS score is not provided and the vulnerability is not listed in CISA's KEV catalog. Inference from the description suggests the attack vector is a remote web page running in the browser that can exploit the WebGPU API. While no public exploit is known, the absence of a KEV listing does not preclude manual exploitation. The risk level should be considered moderate, but it is critical for environments that rely heavily on GPU workloads.