Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
History

Wed, 28 Oct 2026 00:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
CWE-787

Tue, 27 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
CWE-787

Tue, 27 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
CWE-787

Tue, 27 Oct 2026 18:45:00 +0000

Type Values Removed Values Added
Description Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, and Thunderbird 159. Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
References

Tue, 27 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Description Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, and Thunderbird 159.
References

Tue, 27 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Mozilla
Mozilla firefox
Vendors & Products Mozilla
Mozilla firefox

Tue, 27 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
Title Incorrect boundary conditions in the Graphics: WebRender component
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2026-10-27T14:05:47.274Z

Updated: 2026-10-27T18:30:05.167Z

Reserved: 2026-10-27T14:05:47.083Z

Link: CVE-2026-117979

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-27T14:16:55.833

Modified: 2026-10-27T19:17:23.717

Link: CVE-2026-117979

cve-icon Redhat

No data.