6.5
Medium
CVE-2026-92031 Information disclosure in the Graphics: ImageLib component
Description
Information disclosure in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 156 | earliest → < 156 | 156 |
| Firefox 153.3 | earliest → < 153.3 | 153.3 |
| Firefox 140.16 | earliest → < 140.16 | 140.16 |
| Thunderbird 156 | earliest → < 156 | 156 |
| Thunderbird 153.3 | earliest → < 153.3 | 153.3 |
| Thunderbird 140.16 | earliest → < 140.16 | 140.16 |