CVE-2026-113399
Awaiting Analysis Awaiting Analysis - Queue

Incorrect Boundary Conditions in Firefox SVG Component

Publication date: 2026-10-20

Last updated on: 2026-10-29

Assigner: Mozilla Corporation

Description
Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-29
Generated
2026-11-09
AI Q&A
2026-10-20
EPSS Evaluated
2026-11-08
NVD
CVE-2026-113399
EUVD
EUVD-2026-104980

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mozilla firefox 158.0.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-190 The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves incorrect boundary conditions in the SVG component of Firefox. It was addressed in Firefox version 158.0.1.

Detection Guidance

This vulnerability is specific to Firefox 158.0.1 and Thunderbird 158.0.1. To detect it, check your installed version of Firefox or Thunderbird. If you are running version 158.0.1, update immediately to version 158.0.1 or later to address the issue.

Impact Analysis

The vulnerability could allow attackers to exploit boundary conditions in SVG rendering, potentially leading to memory corruption or arbitrary code execution. Users of affected Firefox versions may be at risk of crashes or security breaches.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with GDPR, HIPAA, or other standards. The vulnerability involves incorrect boundary conditions in the SVG component of Firefox and Thunderbird, but no compliance-related effects are mentioned.

Mitigation Strategies

Update Firefox to version 158.0.1 or later to address the incorrect boundary conditions in the SVG component.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-113399. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...