CVE-2026-100813

Analyzed Analyzed - Analysis Complete

Memory Corruption in Firefox JavaScript Engine

Publication date: 2026-09-29

Last updated on: 2026-10-05

Assigner: Mozilla Corporation

Description

Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-10-05

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-100813

EUVD

EUVD-2026-88792

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	firefox	to 157.0.0 (exc)
mozilla	thunderbird	to 157.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-763	The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.

Attack-Flow Graph

Executive Summary

This is a vulnerability in the JavaScript Engine's JIT component that involves an invalid pointer. It was patched in Firefox version 157.

Detection Guidance

This vulnerability is specific to the Firefox JavaScript Engine JIT component and was patched in Firefox 157. Detection requires checking the installed Firefox version. Run 'firefox --version' to verify if your version is below 157.

Impact Analysis

An invalid pointer in the JavaScript Engine could lead to crashes, unexpected behavior, or potentially allow attackers to execute arbitrary code on your system if exploited.

Compliance Impact

This vulnerability does not provide specific details about compliance impacts on standards like GDPR or HIPAA. The issue involves a memory corruption flaw in Firefox's JavaScript Engine JIT component, which could lead to arbitrary code execution or data corruption. Such vulnerabilities may potentially expose sensitive data, affecting compliance with data protection regulations if exploited.

Mitigation Strategies

Update Firefox to version 157 or later to address the invalid pointer issue in the JavaScript Engine JIT component.

Hi! I’m here to help you understand CVE-2026-100813. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70