CVE-2026-120572

Summary

A buffer overflow in Firefox's Layout: Block and Inline component due to incorrect boundary checks can allow an attacker to execute arbitrary code in the context of the browser when a user visits a malicious webpage.

Exploitability

Exploitation requires user interaction (e.g., visiting a crafted webpage) and is non-trivial but feasible given the high CVSS score and presence of memory corruption.

Blast radius

Successful exploitation could lead to full compromise of the affected browser, including theft of sensitive data, session hijacking, or installation of persistent malware.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Firefox 159.0.1 or later, as explicitly stated in the description.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.