【中文导读】该 CVE 涉及内存破坏、越界访问(严重风险)。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4.