CVE-2025-10528

Publication date

2025-09-16 12:26:35

Family

mozilla

State

PUBLISHED

Description

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.