Uninitialized Memory in Firefox Canvas2D component <149/ESR<140.9
CVE-2026-4715 Published on March 24, 2026

Uninitialized memory in the Graphics: Canvas2D component
Uninitialized memory in the Graphics: Canvas2D component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.

NVD


Products Associated with CVE-2026-4715

Want to know whenever a new CVE is published for Mozilla products? stack.watch will email you.

 
 
 

Affected Versions

Mozilla Firefox: Mozilla Firefox ESR: Mozilla Thunderbird: Mozilla Thunderbird: