This vulnerability involves a use-after-free condition in the WebGPU-related IPC mechanisms within Mozilla Firefox, introduced starting with Firefox 142. A compromised child process could trigger this flaw to execute code or escape sandbox restrictions by interacting with the GPU or browser process. The issue was addressed and fixed in Firefox version 144.0.2. The vulnerability is tracked as CVE-2025-12380 and is classified under CWE-416 (Use After Free). It carries a CVSS v3.1 base score of 9.8, reflecting its critical severity and ease of exploitation without privileges or user interaction.

Successful exploitation of this vulnerability could allow an attacker controlling a compromised child process to escape the sandbox environment, potentially leading to arbitrary code execution with elevated privileges in the GPU or browser process. This impacts confidentiality, integrity, and availability of the affected system. No known exploits have been reported in the wild at this time.

Mozilla has released an official fix for this vulnerability in Firefox version 144.0.2. Users and administrators should update to Firefox 144.0.2 or later to remediate this issue. There are no indications that additional mitigation steps are required beyond applying the official update.