What the vulnerability does

01Description

Incorrect boundary conditions in the JavaScript: GC component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.

Key dates

02Disclosure timeline

September 16, 2025 CVE published
April 13, 2026 Record updated