{"id":"CVE-2026-124896","kind":"vulnerability","aliases":["CVE-2026-124896"],"related":[],"title":"Firefox: invalid pointer in text layout and fonts can crash or be exploited","description":"Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.","summary":"Firefox has an invalid pointer bug in its Layout: Text and Fonts component, which handles how text and fonts are drawn on a page. The sources do not say what an attacker can do with it beyond the memory error itself.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Firefox","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browser","desktop","firefox","other"],"not_affected_if":["firefox-160-or-later","firefox-esr-153.7-or-later"],"how_to_check":"- Check the Firefox version with Help > About Firefox, or `firefox --version` on the command line.\n- Compare it with the fixed releases: Firefox `160` or Firefox ESR `153.7`.","fix":"- Firefox `160`\n- Firefox ESR `153.7`","status":"open","published_at":"2026-11-10T14:17:23+00:00","first_seen_at":"2026-11-10T14:22:16+00:00","triaged_at":"2026-11-10T14:24:57+00:00","updated_at":"2026-11-10T14:24:57+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-10T14:24:57Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox `160`\n- Firefox ESR `153.7`","reach":"unknown","title":"Firefox: invalid pointer in text layout and fonts can crash or be exploited","impact":"medium","summary":"Firefox has an invalid pointer bug in its Layout: Text and Fonts component, which handles how text and fonts are drawn on a page. The sources do not say what an attacker can do with it beyond the memory error itself.","audience":"everyone","category":"other","nicknames":[],"who_cares":["firefox","desktop","browser"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; invalid pointer could allow crashes or code execution","analyst_note":"Check the Mozilla security advisory for this CVE to confirm the impact, reach and whether web content can trigger it.","how_to_check":"- Check the Firefox version with Help > About Firefox, or `firefox --version` on the command line.\n- Compare it with the fixed releases: Firefox `160` or Firefox ESR `153.7`.","plain_action":"Update Firefox to version 160 or the ESR version 153.7 using its built-in update check.","product_name":"Firefox","needs_analyst":true,"not_affected_if":["firefox-160-or-later","firefox-esr-153.7-or-later"],"who_is_affected":"Anyone running Firefox versions before 160 or ESR versions before 153.7 is affected. The sources do not say whether a web page alone can trigger the bug or whether user interaction is needed. Systems that do not run Firefox are not affected.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000749,"input_tokens":4482,"output_tokens":601,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124896':16A,19A '-2026':15A,18A '153.7':83C '160':79C 'attack':55B 'beyond':60B 'browser':21B 'bug':29B 'compon':36B,72C 'crash':10A 'cve':14A,17A 'desktop':22B 'drawn':44B 'error':63B 'esr':82C 'exploit':13A 'firefox':1A,20A,23B,24B,78C,81C 'fix':76C 'font':8A,35B,42B,71C 'handl':38B 'invalid':2A,27B,64C 'layout':6A,32B,68C 'memori':62B 'page':47B 'pointer':3A,28B,65C 'say':52B 'sourc':49B 'text':5A,33B,40B,69C 'vulner':74C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox versions before 160 or ESR versions before 153.7 is affected. The sources do not say whether a web page alone can trigger the bug or whether user interaction is needed. Systems that do not run Firefox are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox to version 160 or the ESR version 153.7 using its built-in update check.","pkeys":["firefox"],"ptokens":["firefox"],"labels":["browser","desktop","firefox","other","unknown","vendor"],"campaign_type":null,"search_a":"'-124896':16A,19A '-2026':15A,18A 'crash':10A 'cve':14A,17A 'exploit':13A 'firefox':1A,20A 'font':8A 'invalid':2A 'layout':6A 'pointer':3A 'text':5A","search_b":"'attack':55B 'beyond':60B 'browser':21B 'bug':29B 'compon':36B 'desktop':22B 'drawn':44B 'error':63B 'firefox':23B,24B 'font':35B,42B 'handl':38B 'invalid':27B 'layout':32B 'memori':62B 'page':47B 'pointer':28B 'say':52B 'sourc':49B 'text':33B,40B","search_c":"'153.7':83C '160':79C 'compon':72C 'esr':82C 'firefox':78C,81C 'fix':76C 'font':71C 'invalid':64C 'layout':68C 'pointer':65C 'text':69C 'vulner':74C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:23+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124896","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124896","severity":null,"published_at":"2026-11-10T14:17:23+00:00","modified_at":"2026-11-10T14:17:23+00:00","first_seen_at":"2026-11-10T14:22:16+00:00","fetched_at":"2026-11-10T14:22:16+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}