CVE-2026-6775 involves incorrect boundary conditions in the WebRTC component of Mozilla Firefox, which could potentially lead to memory safety issues. This vulnerability is part of a broader set of memory safety bugs fixed in Firefox 150 and Thunderbird 150. The CVSS vector indicates it is remotely exploitable without privileges or user interaction, impacting confidentiality with no integrity or availability impact. The issue is tracked under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). Mozilla has released an official fix in Firefox 150 and Thunderbird 150 to address this and related vulnerabilities.

The vulnerability could allow an attacker to cause limited confidentiality loss due to incorrect boundary checks in the WebRTC component. However, there is no indication of integrity or availability impact. No known exploits are reported in the wild, reducing immediate risk. The fix in Firefox 150 and Thunderbird 150 mitigates this vulnerability.

Users and administrators should update to Firefox 150 or later and Thunderbird 150 or later to remediate this vulnerability. The vendor advisory confirms that the issue is fixed in these versions. No additional mitigation steps are required beyond applying the official update.