---
id: "CVE-2026-124886"
page: "https://infrastack.ai/live/CVE-2026-124886"
kind: "vulnerability"
aliases: ["CVE-2026-124886"]
title: "Firefox: invalid pointer in text layout and font handling"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["browser", "firefox", "other"]
not_affected_if: ["already-updated"]
published_at: "2026-11-10T14:17:21+00:00"
first_seen_at: "2026-11-10T14:22:15+00:00"
updated_at: "2026-11-10T14:26:07+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124886", "first_seen_at": "2026-11-10T14:22:15+00:00"}]
exploit_sources: []
---

# Firefox: invalid pointer in text layout and font handling

Link for people: https://infrastack.ai/live/CVE-2026-124886 (this .md is for agents)

Firefox's Layout: Text and Fonts component contains an invalid pointer flaw. The sources do not say what an attacker gets from it, and the description only states it was fixed in Firefox 160 and Firefox ESR 153.7.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Firefox version in the About Firefox dialog.
- Compare it against `160` (Firefox) and `153.7` (Firefox ESR).

## Fix

- Firefox: `160`
- Firefox ESR: `153.7`

## Timeline

- 2026-11-10T14:22:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124886

## From the sources

Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_