Skip to main content
EPSS 0.3%top 74%

Mozjs52: [Unknown description] (CVE-2026-84141)

0
Medium
Published: 09/01/2026 (09/01/2026, 00:00:00 UTC)
Source: GCVE Database
Product: mozjs52

Description

CVE-2026-84141 is an integer overflow vulnerability in the Graphics: ImageLib component of Firefox. It was identified as a low impact issue among multiple security vulnerabilities fixed in Firefox 155 and Firefox ESR 153.2. The vulnerability was internally found and fixed by Mozilla, with evidence suggesting potential memory corruption or other security-relevant defects. The fix is included in Firefox 155 and Firefox ESR 153.2 releases.

CVSS v3.1

Score 9.8critical

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Affected versions
<155<153.2

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 09/07/2026, 22:09:57 UTC

Technical Analysis

CVE-2026-84141 is an integer overflow vulnerability affecting the Graphics: ImageLib component in Firefox. It was discovered internally and fixed in Firefox 155 and Firefox ESR 153.2. The vulnerability is part of a broader set of security issues addressed in these releases, some of which showed evidence of memory corruption or other security-relevant defects. The CVSS score is 9.8, indicating high severity, but the vendor advisory classifies the impact of this specific issue as low. No known exploits in the wild have been reported. The vulnerability affects Firefox versions prior to 155 and Firefox ESR versions prior to 153.2.

Potential Impact

The vulnerability could potentially lead to memory corruption or other security-relevant defects due to an integer overflow in the Graphics: ImageLib component. However, the vendor advisory categorizes the impact of this specific vulnerability as low. There are no known active exploits in the wild. The overall CVSS score is high (9.8), but this appears to reflect the aggregated severity of multiple vulnerabilities fixed simultaneously rather than this issue alone.

Mitigation Recommendations

The vulnerability is fixed in Firefox 155 and Firefox ESR 153.2. Users and administrators should update to these versions or later to remediate this issue. No additional mitigation actions are required beyond applying the official updates provided by Mozilla.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Osv Id
GHSA-gv8g-6jfv-cj7x
Osv Schema Version
1.4.0
Aliases
["CVE-2026-84141"]

Threat ID: 6a98456facd9273b496ad081

Added to database: 09/02/2026, 15:49:03 UTC

Last enriched: 09/07/2026, 22:09:57 UTC

Last updated: 10/18/2026, 06:48:20 UTC

Views: 35

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses