PatchGap
Firefox · DOM

CVE-2026-8967

Logic Error in DOM
Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionInformation disclosure in the Graphics: WebGPU component
ComponentDOM
Bug ClassLogic Error
Tracker2027173
Fix commite51b9e99c91f (firefox) +4/-4
CISA KEVNot listed
CreditedInseo An
Disclosed2026-05-19

Files Changed

  • dom/webgpu/CanvasContext.cpp

Patch

view commit
diff --git a/dom/webgpu/CanvasContext.cpp b/dom/webgpu/CanvasContext.cpp
index 03894fdf265..0397826e710 100644
--- a/dom/webgpu/CanvasContext.cpp
+++ b/dom/webgpu/CanvasContext.cpp
@@ -338,10 +338,10 @@ mozilla::UniquePtr<uint8_t[]> CanvasContext::GetImageBuffer(
 
   nsRFPService::PotentiallyDumpImage(PrincipalOrNull(), dataSurface);
   if (ShouldResistFingerprinting(RFPTarget::CanvasRandomization)) {
-    gfxUtils::GetImageBufferWithRandomNoise(dataSurface,
-                                            /* aIsAlphaPremultiplied */ true,
-                                            GetCookieJarSettings(),
-                                            PrincipalOrNull(), &*out_format);
+    return gfxUtils::GetImageBufferWithRandomNoise(
+        dataSurface,
+        /* aIsAlphaPremultiplied */ true, GetCookieJarSettings(),
+        PrincipalOrNull(), &*out_format);
   }
 
   return gfxUtils::GetImageBuffer(dataSurface, /* aIsAlphaPremultiplied */ true,
Loading diff…
On This Page