CVE-2026-5732: Incorrect boundary conditions, integer overflow in the Graphics: Text component
Published Apr 7, 2026
·Updated
Incorrect boundary conditions, integer overflow in the Graphics: Text component
Affected Software
8 affected componentsFixes available
Mozilla Firefox<149.0.2
149.0.2
Mozilla Firefox ESR<140.9.1
140.9.1
Mozilla Thunderbird<149.0.2
149.0.2
Mozilla Thunderbird<140.9.1
140.9.1
Mozilla Firefox<140.9.1
Mozilla Firefox<149.0.2
All of the following
azurelinux/firefox<0:158.0.1-15
0:158.0.1-15
Microsoft Azure Linux=4.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 149.0.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 140.9.1 - Upgrade
Upgrade
azurelinux/firefoxto a version that resolves this vulnerability.Fixed in 0:158.0.1-15 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 149.0.2 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.9.1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 149.0.2 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 140.9.1
Event History
Apr 7, 2026
CVE Published
via Mozilla·12:00 AM
Data Sourced
via Mozilla·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·12:43 PM
Data Sourced
via MITRE·12:43 PM
Description
Data Sourced
via Red Hat·01:02 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·01:16 PM
DescriptionSeverityWeaknessAffected Software
Nov 14, 2026
Data Sourced
via Microsoft·09:15 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·09:15 AM
Affected Software
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.