{"id":"CVE-2026-117888","kind":"vulnerability","aliases":["CVE-2026-117888"],"related":[],"title":"Firefox: uninitialized memory in Canvas2D can expose data","description":"Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.","summary":"Firefox's Canvas2D graphics component reads memory that was never initialized, which can leak or corrupt data in the browser process. Sources do not say whether an attacker can turn this into code execution or a page-only leak.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","desktop","firefox","runtime"],"not_affected_if":["already-on-fixed-version"],"how_to_check":"- Run `firefox --version` (or check About Firefox) and compare against the fixed versions `159` and `153.6` for ESR\n- unknown for other checks; the sources do not list them","fix":"- Update Firefox to `159` or later, or Firefox ESR to `153.6` or later\n- unknown for other mitigations; the sources do not say","status":"open","published_at":"2026-10-27T14:16:44+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","triaged_at":"2026-10-27T14:37:50+00:00","updated_at":"2026-10-27T14:37:50+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-10-27T14:37:50Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later, or Firefox ESR to `153.6` or later\n- unknown for other mitigations; the sources do not say","reach":"internet","title":"Firefox: uninitialized memory in Canvas2D can expose data","impact":"medium","summary":"Firefox's Canvas2D graphics component reads memory that was never initialized, which can leak or corrupt data in the browser process. Sources do not say whether an attacker can turn this into code execution or a page-only leak.","category":"runtime","nicknames":[],"who_cares":["firefox","browsers","desktop"],"confidence":0.4,"needs_auth":"no","worst_case":"unknown; sources do not say what an attacker can read or run","analyst_note":"Check the Mozilla advisory for CVE-2026-117888 to confirm trigger conditions, user interaction, and the impact of the uninitialized read.","how_to_check":"- Run `firefox --version` (or check About Firefox) and compare against the fixed versions `159` and `153.6` for ESR\n- unknown for other checks; the sources do not list them","needs_analyst":true,"not_affected_if":["already-on-fixed-version"],"who_is_affected":"Anyone running Firefox or Firefox ESR builds older than the fixed versions, including desktop installs and managed fleets. The sources do not say whether a web page alone can trigger the flaw or whether a special setting is needed. Teams that only use other browsers or already run the fixed releases can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000601,"input_tokens":3248,"output_tokens":553,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117888':11A,14A '-2026':10A,13A '153.6':76C '159':72C 'attack':46B 'browser':15B,38B 'canvas2d':5A,21B,64C 'code':51B 'compon':23B,65C 'corrupt':34B 'cve':9A,12A 'data':8A,35B 'desktop':16B 'esr':75C 'execut':52B 'expos':7A 'firefox':1A,17B,19B,71C,74C 'fix':69C 'graphic':22B,63C 'initi':29B 'leak':32B,58B 'memori':3A,25B,60C 'never':28B 'page':56B 'page-on':55B 'process':39B 'read':24B 'runtim':18B 'say':43B 'sourc':40B 'turn':48B 'uniniti':2A,59C 'vulner':67C 'whether':44B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox or Firefox ESR builds older than the fixed versions, including desktop installs and managed fleets. The sources do not say whether a web page alone can trigger the flaw or whether a special setting is needed. Teams that only use other browsers or already run the fixed releases can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:44+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117888","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117888","severity":null,"published_at":"2026-10-27T14:16:44+00:00","modified_at":"2026-10-27T14:16:44+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","fetched_at":"2026-10-27T14:32:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}