CVE-2026-74977 describes an integer overflow vulnerability located in the Graphics component of Mozilla Firefox. This flaw was identified internally and fixed in Firefox 154 and Firefox ESR 153.1 releases. The Mozilla advisories for these versions include multiple security fixes addressing various high-impact vulnerabilities, including this integer overflow. The vulnerability could allow for memory corruption or other security-relevant defects if exploited. However, there are no known active exploits in the wild for this specific issue. The fix is included in the official Firefox 154 and Firefox ESR 153.1 updates.

The integer overflow in the Graphics component could lead to memory corruption or other security-relevant defects, potentially allowing an attacker to compromise the affected system. The impact is considered low for this specific CVE, but it is part of a larger set of vulnerabilities with varying impact levels fixed in the same releases. No active exploitation has been reported, reducing immediate risk.

Mozilla has released official fixes for this vulnerability in Firefox 154 and Firefox ESR 153.1. Users and administrators should update to these versions or later to remediate the issue. No additional mitigation steps are required beyond applying the official updates.