← Back

CVE-2025-14322

nvd nist
Published: Dec 9, 2025Modified: Apr 13, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Exploitability: 1.6 / Impact: 5.8
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Affected (5)

Mozilla
2 products
Firefox
Thunderbird
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Mozilla
Firefox
Before 146.0
Firefox
Before 115.31.0
Firefox
From 116.0 to 140.6.0
Mozilla
Thunderbird
Before 146.0
Thunderbird
Before 140.6.0

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (6)

Source: security@mozilla.org
Issue TrackingPermissions Required
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Vendor Advisory
Source: security@mozilla.org
Vendor Advisory

Timeline

No history available yet.