REDHAT-BUG-2503425: Use After Free

Published Jul 21, 2026

Updated

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13.

Affected Software

3 affected components

Mozilla Firefox=153

Mozilla Firefox ESR 115=115.38

Mozilla Firefox ESR 140=140.13

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox to a version that resolves this vulnerability.
Fixed in 153
Upgrade
Upgrade Firefox ESR to a version that resolves this vulnerability.
Fixed in 115.38
Upgrade
Upgrade Firefox ESR to a version that resolves this vulnerability.
Fixed in 140.13

Event History

Jul 21, 2026

Data Sourced

via Red Hat·01:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2503425?

The severity of REDHAT-BUG-2503425 is high, rated at 7.

How do I fix REDHAT-BUG-2503425?

To fix REDHAT-BUG-2503425, update to Firefox version 153, Firefox ESR 115.38, or Firefox ESR 140.13.

What causes the vulnerability REDHAT-BUG-2503425?

REDHAT-BUG-2503425 is caused by a use-after-free issue in the Disability Access APIs component.

Which versions of Mozilla Firefox are affected by REDHAT-BUG-2503425?

Affected versions include any prior to Firefox 153 and Firefox ESR 115.38 and 140.13.

What impact does REDHAT-BUG-2503425 have on users?

REDHAT-BUG-2503425 poses a risk of sandbox escape, potentially allowing malicious code execution.