PT-2026-76997 · Mozilla+1 · Firefox+2

·

CVE-2026-74964

·

Published

2026-08-18

·

Updated

2026-09-08

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird ESR versions prior to 140.14 Thunderbird ESR versions prior to 153.1
Description An integer overflow occurs within the Graphics component. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of bits.
Recommendations Update Firefox to version 154. Update Firefox ESR to version 140.14. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird ESR to version 140.14. Update Thunderbird ESR to version 153.1.

Fix

DoS

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:58897
ALSA-2026:58898
ALSA-2026:58899
ALSA-2026:65159
ALSA-2026:65160
CVE-2026-74964
OESA-2026-3556
OESA-2026-3557
OESA-2026-3558
OESA-2026-3559
OESA-2026-3576
OESA-2026-3577
OPENSUSE-SU-2026:11546-1
OPENSUSE-SU-2026:11558-1
OPENSUSE-SU-2026:11580-1
OPENSUSE-SU-2026:21594-1
OPENSUSE-SU-2026:21713-1
SUSE-SU-2026:23304-1
SUSE-SU-2026:23411-1
SUSE-SU-2026:3658-1
SUSE-SU-2026:3683-1
SUSE-SU-2026:3897-1

Affected Products

Firefox
Rocky Linux
Thunderbird