CVE-2011-3653: Mozilla Firefox

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do not properly interact with the GPU memory behavior of a certain driver for Intel integrated GPUs, which allows remote attackers to bypass the Same Origin Policy and read image data via vectors related to WebGL textures.

Affected products

• Mozilla Firefox: up to and including 7.0.1; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …
• Mozilla Thunderbird: up to and including 7.0.1; version 0.1 only; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; …

Published 2011-11-09. Last modified 2026-06-16.