High firefox Logic Error 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impacthigh
DescriptionPrivilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component
ComponentDOM
Bug ClassLogic Error
Tracker2058065
Fix commit0d3efc88d2f4 (firefox) +1/-0
CISA KEVNot listed
CreditedMozilla
Disclosed2026-09-15

Files Changed

  • dom/canvas/WebGLTextureUpload.cpp
diff --git a/dom/canvas/WebGLTextureUpload.cpp b/dom/canvas/WebGLTextureUpload.cpp
index e5dfa1fc7af..a9d2d4e8321 100644
--- a/dom/canvas/WebGLTextureUpload.cpp
+++ b/dom/canvas/WebGLTextureUpload.cpp
@@ -1125,6 +1125,7 @@ void WebGLTexture::TexImage(uint32_t level, GLenum respecFormat,
         driverUnpackInfo->unpackType);
     mContext->ErrorInvalidOperation("%s", dui.get());
     gfxCriticalError() << mContext->FuncName() << ": " << dui.get();
+    Truncate();
     return;
   }
 
Loading diff…