Threats affecting pkg:generic/wolfssl

CVE-2026-124939 is a vulnerability involving just-in-time (JIT) miscompilation in the JavaScript engine's JIT component. This flaw was addressed and fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability is classified with high impact by Mozilla, indicating serious security concerns if left unpatched.

Information disclosure in the Marionette component. This vulnerability was fixed in Firefox 160.

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Information disclosure in the Security: RLBox component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

CVE-2026-124933 is a sandbox escape vulnerability in the Console component of Firefox. This security flaw allows code running within the sandbox to break out of its restricted environment. The issue was addressed and fixed in Firefox 160 and Firefox ESR 153.7.

Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.

Mitigation bypass in the SVG component. This vulnerability was fixed in Firefox 160.

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 160.

CVE-2026-124932 is a use-after-free vulnerability in the Graphics component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact including confidentiality, integrity, and availability losses. No known exploits in the wild have been reported for this vulnerability.

Information disclosure in the Address Bar component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Undefined behavior in the WebRTC: Networking component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Same-origin policy bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Information disclosure in the Layout: Form Controls component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Spoofing issue in the Security component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

Information disclosure in the Layout component. This vulnerability was fixed in Firefox 160.

CVE-2026-124922 is a use-after-free vulnerability in the CSS Transitions and Animations component of Firefox. This flaw was addressed and fixed in Firefox version 160 and Firefox ESR 153.7. The vulnerability has a high severity rating with a CVSS score of 8.8, indicating it can lead to significant impact including confidentiality, integrity, and availability compromise. No known exploits in the wild have been reported as of the advisory date.

Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7.

CVE-2026-124926 is a high-severity vulnerability involving incorrect boundary conditions in the WebRTC component of Firefox. This flaw could lead to significant impacts on confidentiality, integrity, and availability. The issue was addressed and fixed in Firefox version 160 and Firefox ESR 153.7.

CVE-2026-124919 is a high-severity use-after-free vulnerability in the WebRTC networking component of Firefox. It allows for privilege escalation and was fixed in Firefox 160 and Firefox ESR 153.7. The vulnerability has a CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability if exploited.