Findings

CVE-2026-109730

Integer overflow in the Graphics component

Published Oct 13, 2026 · updated Oct 15, 2026 · Mozilla Firefox

Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · CIRCL Vulnerability Lookup

    Detected

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  2. Oct 15, 2026 · CIRCL Vulnerability Lookup

    Updated

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Affected

  • vendor Mozilla Firefoxversion unspecified
  • vendor Mozilla Thunderbirdversion unspecified

Sources

  • CIRCL Vulnerability LookupVulnerability recordCVE-2026-109730

    Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    vulnerability.circl.lu
  • CVE.orgVulnerability recordCVE-2026-109730

    Official CVE identifier

    cve.org

References

CVE-2026-109730 · ZeroDay Findings