
FreeType 2.14.3 introduced a font rendering bug (CVE-2026-10701). Mozilla reproduced a Firefox crash on Linux by loading a specially made font with medium or full hinting enabled. The bug starts with a check that reserves too little memory.
Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 151.0.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.

FreeType 2.14.3 introduced a font rendering bug (CVE-2026-10701). Mozilla reproduced a Firefox crash on Linux by loading a specially made font with medium or full hinting enabled. The bug starts with a check that reserves too little memory.

CVE-2026-10701 | Mozilla Firefox | CVSS 7.5 HIGH 🐛 Memory boundary bug in text rendering - sensitive browser memory exposed without user interaction ✅ Fixed: Firefox 151.0.3 (June 2, 2026) 🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-10701 Emergency out-of-band patch. Check your managed Firefox deployments. #CVE #Firefox #PatchNow #Security
Post summary
The entry reports a high‑severity memory boundary bug in Firefox that exposes sensitive memory, which has been fixed in Firefox 151.0.3 with an emergency patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |