{"id":"CVE-2026-117886","kind":"vulnerability","aliases":["CVE-2026-117886"],"related":[],"title":"Firefox: incorrect boundary checks in Graphics Text component fixed","description":"Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.","summary":"Firefox's Graphics: Text component has incorrect boundary conditions, a memory-safety style flaw whose exact effect the sources do not describe. Fixed in Firefox 159, Firefox ESR 115.44 and Firefox ESR 153.6.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","desktop","firefox","runtime"],"not_affected_if":["patched-version"],"how_to_check":"- Run `firefox --version` (or check About Firefox) and compare against `159`, `115.44` or `153.6` for ESR.\n- Check the installed ESR channel version on managed desktops via your package or MDM inventory.","fix":"- Update Firefox to `159` or later.\n- Update Firefox ESR to `115.44` or `153.6` or later.","status":"open","published_at":"2026-10-27T14:16:43+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","triaged_at":"2026-10-27T14:37:53+00:00","updated_at":"2026-10-27T14:37:53+00:00","category":"runtime","confidence":0.35,"triage":{"at":"2026-10-27T14:37:53Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later.\n- Update Firefox ESR to `115.44` or `153.6` or later.","reach":"internet","title":"Firefox: incorrect boundary checks in Graphics Text component fixed","impact":"medium","summary":"Firefox's Graphics: Text component has incorrect boundary conditions, a memory-safety style flaw whose exact effect the sources do not describe. Fixed in Firefox 159, Firefox ESR 115.44 and Firefox ESR 153.6.","category":"runtime","nicknames":[],"who_cares":["firefox","desktop","browsers"],"confidence":0.35,"needs_auth":"unknown","worst_case":"unknown; sources do not describe the impact","analyst_note":"Check the Mozilla security advisory for this CVE to learn the impact (memory corruption or otherwise) and whether user interaction is needed.","how_to_check":"- Run `firefox --version` (or check About Firefox) and compare against `159`, `115.44` or `153.6` for ESR.\n- Check the installed ESR channel version on managed desktops via your package or MDM inventory.","needs_analyst":true,"not_affected_if":["patched-version"],"who_is_affected":"Anyone running an affected Firefox build on a desktop or managed fleet that renders web content. The sources do not say whether specific configurations or content types are required, so exposure beyond unpatched versions is unknown. Teams on patched builds can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000599,"input_tokens":3258,"output_tokens":547,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117886':12A,15A '-2026':11A,14A '115.44':49B,71C '153.6':53B,75C '159':46B,68C 'boundari':3A,27B,55C 'browser':16B 'check':4A 'compon':8A,24B,61C 'condit':28B,56C 'cve':10A,13A 'describ':42B 'desktop':17B 'effect':37B 'esr':48B,52B,70C,74C 'exact':36B 'firefox':1A,18B,20B,45B,47B,51B,67C,69C,73C 'fix':9A,43B,65C 'flaw':34B 'graphic':6A,22B,59C 'incorrect':2A,26B,54C 'memori':31B 'memory-safeti':30B 'runtim':19B 'safeti':32B 'sourc':39B 'style':33B 'text':7A,23B,60C 'vulner':63C 'whose':35B","nicknames":[],"mitigations":[],"who_affected":"Anyone running an affected Firefox build on a desktop or managed fleet that renders web content. The sources do not say whether specific configurations or content types are required, so exposure beyond unpatched versions is unknown. Teams on patched builds can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117886","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117886","severity":null,"published_at":"2026-10-27T14:16:43+00:00","modified_at":"2026-10-27T14:16:43+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","fetched_at":"2026-10-27T14:32:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}