CVE-2025-11152: Mozilla Firefox

High severity, CVSS 8.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.

Affected products

• Mozilla Firefox: before 143.0.3 (fixed in 143.0.3)

Published 2025-09-30. Last modified 2026-06-17.