PatchGap
Firefox · Layout

CVE-2026-117875

Logic Error in Layout
High firefox Logic Error 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impacthigh
DescriptionUse-after-free in the Layout: Scrolling and Overflow component
ComponentLayout
Bug ClassLogic Error
Tracker2073686
Fix commit6772a78a107a (firefox) +1/-0
CISA KEVNot listed
CreditedMozilla
Disclosed2026-10-27

Files Changed

  • layout/generic/ScrollbarActivity.cpp

Patch

view commit
diff --git a/layout/generic/ScrollbarActivity.cpp b/layout/generic/ScrollbarActivity.cpp
index 4198d0ef4ef..5797a5a5c95 100644
--- a/layout/generic/ScrollbarActivity.cpp
+++ b/layout/generic/ScrollbarActivity.cpp
@@ -162,6 +162,7 @@ void ScrollbarActivity::StartFadeTimer() {
 }
 
 void ScrollbarActivity::BeginFade() {
+  nsAutoScriptBlocker scriptBlocker;
   MOZ_ASSERT(!IsActive());
   mScrollbarEffectivelyVisible = false;
   SetScrollbarActive(GetHorizontalScrollbar(), false);
Loading diff…
On This Page