Boundary Condition Flaw in SVG Component of Firefox by Mozilla
CVE-2026-113399

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 20 October 2026

What is CVE-2026-113399?

A boundary condition flaw was discovered in the SVG component of Firefox that could potentially allow an attacker to exploit this weakness. This issue could lead to unpredictable behavior when the affected SVG component is processed, posing risks of denial of service or other unintended consequences. Mozilla has addressed this flaw in version 158.0.1, reinforcing the security of its browser against potential exploitations.

Affected Version(s)

Firefox 158.0.1

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2079938

https://www.mozilla.org/security/advisories/mfsa2026-111/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 20, 2026
Vulnerability Reserved
Oct 20, 2026

Credit

Mozilla

CVE-2026-113399 Data

JSON