HIGHCVE-2026-5732Published Modified CNA mozilla
CVE-2026-5732: Incorrect boundary conditions, integer overflow in the Graphics: Text component
Incorrect boundary conditions, integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 149.0.2, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.
Metrics
- CVSS v3.1
- 8.8
- Severity
- HIGH
- Fixed in
- 140.9.1
- Affected Products
- 2
Fix available
140.9.1149.0.2
Affected packages
- Mozilla / FirefoxFixed in 140.9.1, 149.0.2
- Mozilla / ThunderbirdFixed in 140.9.1, 149.0.2
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H