Medium firefox Logic Error 🔧 Commit mapped

Overview

Medium
Severity
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionSite isolation issue in the Graphics: WebRender component
ComponentGraphics
Bug ClassLogic Error
Tracker2040119
Fix commit0096399c9459 (firefox) +6/-0
CISA KEVNot listed
CreditedHcamael
Disclosed2026-07-21

Files Changed

  • gfx/layers/wr/WebRenderBridgeParent.cpp
diff --git a/gfx/layers/wr/WebRenderBridgeParent.cpp b/gfx/layers/wr/WebRenderBridgeParent.cpp
index 4f6de1027bd..6a00d9bc1a7 100644
--- a/gfx/layers/wr/WebRenderBridgeParent.cpp
+++ b/gfx/layers/wr/WebRenderBridgeParent.cpp
@@ -990,6 +990,12 @@ bool WebRenderBridgeParent::UpdateSharedExternalImage(
     return true;
   }
 
+  if (!GetCompositorBridge()->GetCompositorManager()->OwnsExternalImageId(
+          aExtId)) {
+    gfxCriticalNote << "We do not own extId:" << wr::AsUint64(aExtId);
+    return false;
+  }
+
   auto key = wr::AsUint64(aKey);
   auto it = mSharedSurfaceIds.find(key);
   if (it == mSharedSurfaceIds.end()) {
Loading diff…