{"id":"CVE-2026-124887","kind":"vulnerability","aliases":["CVE-2026-124887"],"related":[],"title":"Firefox: boundary error in text layout and fonts code","description":"Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.","summary":"Firefox's Layout: Text and Fonts component mishandled boundary conditions, a memory-safety-style flaw. The sources do not say what an attacker gets beyond that, and no severity is given.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","desktop","firefox","other"],"not_affected_if":["firefox-160-or-later","firefox-esr-153.7-or-later"],"how_to_check":"- Run `firefox --version` (or check About Firefox) and compare with the fixed versions below.\n- Check the ESR branch with the same command if you use Firefox ESR.","fix":"- Firefox `160`\n- Firefox ESR `153.7`","status":"open","published_at":"2026-11-10T14:17:22+00:00","first_seen_at":"2026-11-10T14:22:15+00:00","triaged_at":"2026-11-10T14:26:04+00:00","updated_at":"2026-11-10T14:26:04+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-11-10T14:26:04Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox `160`\n- Firefox ESR `153.7`","reach":"unknown","title":"Firefox: boundary error in text layout and fonts code","impact":"medium","summary":"Firefox's Layout: Text and Fonts component mishandled boundary conditions, a memory-safety-style flaw. The sources do not say what an attacker gets beyond that, and no severity is given.","audience":"everyone","category":"other","nicknames":[],"who_cares":["firefox","browser","desktop"],"confidence":0.4,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; sources do not state the impact","analyst_note":"Check the Mozilla security advisory for this CVE for the trigger, impact and whether it is memory corruption; the NVD entry gives only the fixed versions.","how_to_check":"- Run `firefox --version` (or check About Firefox) and compare with the fixed versions below.\n- Check the ESR branch with the same command if you use Firefox ESR.","plain_action":"Update Firefox to version 160 or Firefox ESR to 153.7 through its built-in update check.","product_name":"","needs_analyst":true,"not_affected_if":["firefox-160-or-later","firefox-esr-153.7-or-later"],"who_is_affected":"unknown. The sources name only the Firefox versions that fix the flaw; they do not describe the trigger, the configuration, or the data path. Installations on Firefox versions older than 160 (or ESR older than 153.7) are the ones to update.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00073,"input_tokens":4490,"output_tokens":561,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124887':12A,15A '-2026':11A,14A '153.7':71C '160':67C 'attack':42B 'beyond':44B 'boundari':2A,27B,52C 'browser':16B 'code':9A 'compon':25B,60C 'condit':28B,53C 'cve':10A,13A 'desktop':17B 'error':3A 'esr':70C 'firefox':1A,18B,19B,66C,69C 'fix':64C 'flaw':34B 'font':8A,24B,59C 'get':43B 'given':50B 'incorrect':51C 'layout':6A,21B,56C 'memori':31B 'memory-safety-styl':30B 'mishandl':26B 'safeti':32B 'say':39B 'sever':48B 'sourc':36B 'style':33B 'text':5A,22B,57C 'vulner':62C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160 or Firefox ESR to 153.7 through its built-in update check.","pkeys":[],"ptokens":[],"labels":["browser","desktop","firefox","other","unknown"],"campaign_type":null,"search_a":"'-124887':12A,15A '-2026':11A,14A 'boundari':2A 'code':9A 'cve':10A,13A 'error':3A 'firefox':1A 'font':8A 'layout':6A 'text':5A","search_b":"'attack':42B 'beyond':44B 'boundari':27B 'browser':16B 'compon':25B 'condit':28B 'desktop':17B 'firefox':18B,19B 'flaw':34B 'font':24B 'get':43B 'given':50B 'layout':21B 'memori':31B 'memory-safety-styl':30B 'mishandl':26B 'safeti':32B 'say':39B 'sever':48B 'sourc':36B 'style':33B 'text':22B","search_c":"'153.7':71C '160':67C 'boundari':52C 'compon':60C 'condit':53C 'esr':70C 'firefox':66C,69C 'fix':64C 'font':59C 'incorrect':51C 'layout':56C 'text':57C 'vulner':62C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:22+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124887","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124887","severity":null,"published_at":"2026-11-10T14:17:22+00:00","modified_at":"2026-11-10T14:17:22+00:00","first_seen_at":"2026-11-10T14:22:15+00:00","fetched_at":"2026-11-10T14:22:15+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}