CVE-2026-12325: Vulnerability in Mozilla Firefox
Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37.
AI Analysis
Technical Summary
CVE-2026-12325 is a denial-of-service vulnerability affecting the Graphics: ImageLib component in Mozilla Firefox. It was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37. This vulnerability is one among many security issues resolved in these releases, which also include high-impact memory safety bugs and sandbox escapes. The vendor advisories confirm the fix availability in these versions. No evidence of exploitation in the wild is reported.
Potential Impact
The vulnerability allows an attacker to cause a denial-of-service condition in Firefox by targeting the Graphics: ImageLib component. The impact is rated low for this specific issue. There is no indication of code execution or privilege escalation from this vulnerability alone. It contributes to the overall security posture improvements in the fixed Firefox versions.
Mitigation Recommendations
A fix is available and has been officially released by Mozilla. Users should upgrade to Firefox 152, Firefox ESR 140.12, or Firefox ESR 115.37 to remediate this vulnerability. No additional mitigation actions are required beyond applying these updates.
CVE-2026-12325: Vulnerability in Mozilla Firefox
Description
Denial-of-service in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37.
CVSS v3.1
Score 6.5medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-12325 is a denial-of-service vulnerability affecting the Graphics: ImageLib component in Mozilla Firefox. It was fixed in Firefox 152, Firefox ESR 140.12, and Firefox ESR 115.37. This vulnerability is one among many security issues resolved in these releases, which also include high-impact memory safety bugs and sandbox escapes. The vendor advisories confirm the fix availability in these versions. No evidence of exploitation in the wild is reported.
Potential Impact
The vulnerability allows an attacker to cause a denial-of-service condition in Firefox by targeting the Graphics: ImageLib component. The impact is rated low for this specific issue. There is no indication of code execution or privilege escalation from this vulnerability alone. It contributes to the overall security posture improvements in the fixed Firefox versions.
Mitigation Recommendations
A fix is available and has been officially released by Mozilla. Users should upgrade to Firefox 152, Firefox ESR 140.12, or Firefox ESR 115.37 to remediate this vulnerability. No additional mitigation actions are required beyond applying these updates.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mozilla
- Date Reserved
- 2026-06-15T15:08:21.546Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://www.mozilla.org/security/advisories/mfsa2026-57/","vendor":"Mozilla"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-58/","vendor":"Mozilla"},{"url":"https://www.mozilla.org/security/advisories/mfsa2026-59/","vendor":"Mozilla"}]
Threat ID: 6a314c830b89be6888b4cddb
Added to database: 6/16/2026, 1:15:47 PM
Last enriched: 6/16/2026, 1:31:46 PM
Last updated: 6/17/2026, 5:02:15 AM
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.