The vulnerability resides in the Safe Browsing component and stems from incorrect boundary conditions. This flaw can potentially allow an attacker to cause the browser to read or write outside the intended memory boundaries, leading to memory corruption or other disruptive behaviors. The impact is significant to all users of affected browsers because it compromises the integrity and confidentiality of the system running the browser.

Mozilla Firefox and Mozilla Thunderbird are affected. The issue was addressed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156. Versions prior to these releases lack the fix and therefore remain vulnerable.

The EPSS score is less than 1%, indicating a low probability of exploitation. The base CVSS score is 8, reflecting a high severity assessment. The vulnerability is not listed in the CISA KEV catalog, implying no known large-scale exploitation to date. Based on the description, the likely attack vector is remote; an attacker could supply a crafted URL or malicious content that triggers the faulty boundary check during Safe Browsing validation, potentially leading to a memory corruption incident.