7.5
High
CVE-2026-74977 Integer overflow in the Graphics component
Description
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 154 | earliest → < 154 | 154 |
| Firefox 153.1 | earliest → < 153.1 | 153.1 |
| Thunderbird 154 | earliest → < 154 | 154 |
| Thunderbird 153.1 | earliest → < 153.1 | 153.1 |