Skip to content

CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-11152

Sandbox escape due to integer overflow in the Graphics: Canvas2D component

Read JSON ↗CVE.org ↗

Status: Published
Published: 2025-09-30
Updated: 2026-04-13
Assigning organization: mozilla

Description

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

143.0.3 to ≤ *unaffected

References