Firefox · DOM
CVE-2026-74941
Logic Error in DOM
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
dom/canvas/WebGLTransformFeedback.cpp
Patch
diff --git a/dom/canvas/WebGLTransformFeedback.cpp b/dom/canvas/WebGLTransformFeedback.cpp
index 88bf4274278..2f98988d605 100644
--- a/dom/canvas/WebGLTransformFeedback.cpp
+++ b/dom/canvas/WebGLTransformFeedback.cpp
@@ -76,6 +76,7 @@ bool WebGLTransformFeedback::PrepareTransformFeedback() {
}
mActive_VertCapacity = minVertCapacity;
+ mActive_VertPosition = std::min(mActive_VertPosition, mActive_VertCapacity);
return true;
}
Loading diff…
References
On This Page