This vulnerability concerns memory safety bugs in Firefox 150.0.0 that showed evidence of memory corruption. With sufficient effort, these bugs could have been exploited to run arbitrary code. Mozilla released Firefox 150.0.1 to fix these issues. The CVE is part of a set of memory safety bugs fixed simultaneously in Firefox and Thunderbird products. The CVSS 3.1 score is 7.3, indicating high severity, with attack vector network, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. The vendor advisory confirms the fix and provides no indication of active exploitation.

Successful exploitation could allow an attacker to execute arbitrary code remotely without user interaction or privileges, potentially compromising confidentiality, integrity, and availability of the affected system. However, no known exploits are currently reported in the wild.

Mozilla has released an official fix in Firefox version 150.0.1. Users and administrators should update affected Firefox installations from version 150.0.0 to 150.0.1 or later to remediate this vulnerability. Since this is not a cloud service, manual patching is required. There are no vendor indications that additional mitigations are needed beyond applying the update.