This vulnerability is a JIT miscompilation in the JavaScript WebAssembly component of Mozilla Firefox. It was reported by multiple researchers and fixed in Firefox 148. The issue could allow an attacker to cause significant impact on confidentiality, integrity, and availability due to incorrect code generation by the JIT compiler. The CVSS v3.1 base score is 9.8, indicating a critical severity with network attack vector, no privileges required, and no user interaction needed. The vendor advisory confirms the fix in Firefox 148 and Thunderbird 148 and lists this vulnerability among several others addressed in the same update.

The vulnerability allows an attacker to exploit JIT miscompilation in the WebAssembly component, potentially leading to complete compromise of confidentiality, integrity, and availability of the affected system. Given the critical CVSS score of 9.8, successful exploitation could result in remote code execution or other severe impacts without requiring user interaction or privileges.

Mozilla has released an official fix for this vulnerability in Firefox 148. Users and administrators should update affected Firefox installations to version 148 or later to remediate this issue. For Thunderbird users, updating to Thunderbird 148 or later also addresses this vulnerability. No additional mitigation steps are required beyond applying the official update.