CVE-2026-12317 is a memory safety bug in Mozilla Firefox that was resolved in Firefox 152. It is one of multiple memory safety vulnerabilities fixed in this release, which collectively address issues that could lead to memory corruption and potential arbitrary code execution. The Mozilla advisory MFSA 2026-57 confirms the fix and categorizes the impact as low for this specific CVE, although related memory safety bugs in the same release have higher impact ratings. The vulnerability affects Firefox versions before 152, with no further remediation level specified beyond the official fix in Firefox 152.

The vulnerability involves memory safety issues that could lead to memory corruption. While this specific CVE is rated as low impact by Mozilla, the underlying memory corruption could potentially be exploited to execute arbitrary code. No exploits are currently known to be active in the wild. The fix in Firefox 152 mitigates the risk by addressing the memory safety bug.

Users should update to Mozilla Firefox version 152 or later to remediate this vulnerability. The vendor advisory confirms that the issue is fixed in Firefox 152. No additional mitigation actions are required beyond applying this official update.