Mozjs52: [Unknown description] (CVE-2026-84141)
Description
CVE-2026-84141 is an integer overflow vulnerability in the Graphics: ImageLib component of Firefox. It was identified as a low impact issue among multiple security vulnerabilities fixed in Firefox 155 and Firefox ESR 153.2. The vulnerability was internally found and fixed by Mozilla, with evidence suggesting potential memory corruption or other security-relevant defects. The fix is included in Firefox 155 and Firefox ESR 153.2 releases.
CVSS v3.1
Score 9.8critical
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-84141 is an integer overflow vulnerability affecting the Graphics: ImageLib component in Firefox. It was discovered internally and fixed in Firefox 155 and Firefox ESR 153.2. The vulnerability is part of a broader set of security issues addressed in these releases, some of which showed evidence of memory corruption or other security-relevant defects. The CVSS score is 9.8, indicating high severity, but the vendor advisory classifies the impact of this specific issue as low. No known exploits in the wild have been reported. The vulnerability affects Firefox versions prior to 155 and Firefox ESR versions prior to 153.2.
Potential Impact
The vulnerability could potentially lead to memory corruption or other security-relevant defects due to an integer overflow in the Graphics: ImageLib component. However, the vendor advisory categorizes the impact of this specific vulnerability as low. There are no known active exploits in the wild. The overall CVSS score is high (9.8), but this appears to reflect the aggregated severity of multiple vulnerabilities fixed simultaneously rather than this issue alone.
Mitigation Recommendations
The vulnerability is fixed in Firefox 155 and Firefox ESR 153.2. Users and administrators should update to these versions or later to remediate this issue. No additional mitigation actions are required beyond applying the official updates provided by Mozilla.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gv8g-6jfv-cj7x
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-84141"]
Threat ID: 6a98456facd9273b496ad081
Added to database: 09/02/2026, 15:49:03 UTC
Last enriched: 09/07/2026, 22:09:57 UTC
Last updated: 10/18/2026, 06:48:20 UTC
Views: 35
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.