Skip to main content

Information disclosure in the Graphics: ImageLib component. (CVE-2026-92031)

0
Medium
Published: 09/15/2026 (09/15/2026, 15:32:07 UTC)
Source: GCVE Database

Description

CVE-2026-92031 is an information disclosure vulnerability in the Graphics: ImageLib component of Firefox. This issue was addressed and fixed in Firefox 156 and Firefox ESR 140.16. The vulnerability is considered to have moderate impact. No active exploitation in the wild has been reported.

Affected software

GitHub Actionsmore threats →ai
mozilla/firefox
pkg:github/mozilla/firefox
Affected versions
<156
GitHub Actionsmore threats →ai
mozilla/firefox-esr
pkg:github/mozilla/firefox-esr
Affected versions
<140.16

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 09/16/2026, 03:18:05 UTC

Technical Analysis

This vulnerability involves information disclosure within the Graphics: ImageLib component of Firefox. It was resolved by Mozilla in Firefox 156 and Firefox ESR 140.16 as part of a security update addressing multiple vulnerabilities. The Mozilla advisories classify the impact of this specific issue as moderate. No further technical details or exploitation methods are provided in the advisory.

Potential Impact

The vulnerability could allow an attacker to gain access to information that should otherwise be protected within the Graphics: ImageLib component. The impact is rated moderate by the vendor, indicating a limited but non-negligible risk of information leakage.

Mitigation Recommendations

Users and administrators should update Firefox to version 156 or later, or Firefox ESR to version 140.16 or later, where this vulnerability has been fixed. No additional mitigation steps are required as the issue is resolved by the official update.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
GHSA-542f-vpqh-r4pj
Osv Schema Version
1.4.0
Aliases
["CVE-2026-92031"]
State
PUBLISHED

Threat ID: 6aaa081255bf5e2cf5ea4a73

Added to database: 09/16/2026, 03:08:02 UTC

Last enriched: 09/16/2026, 03:18:05 UTC

Last updated: 09/16/2026, 04:01:24 UTC

Views: 4

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses