7.3
High
CVE-2026-12324 Incorrect boundary conditions in the Graphics: CanvasWebGL component
Description
Incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 152 | earliest → < 152 | 152 |
| Firefox 140.12 | earliest → < 140.12 | 140.12 |
| Thunderbird 152 | earliest → < 152 | 152 |
| Thunderbird 140.12 | earliest → < 140.12 | 140.12 |