Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, and Firefox ESR 140.10.
https://www.mozilla.org/security/advisories/mfsa2026-32/
https://www.mozilla.org/security/advisories/mfsa2026-31/