Denial-of-Service Vulnerability in PDF Viewer Component of Firefox

CVE-2026-84138

What is CVE-2026-84138?

A vulnerability was identified in the PDF Viewer component of Mozilla Firefox that could lead to a denial-of-service condition. This issue affects users by potentially causing the application to become unresponsive when processing maliciously crafted PDF files. Affected versions of Firefox include all versions prior to the fix released in Firefox 155. Users are advised to update to the latest version to mitigate any security risks associated with this vulnerability.

References