The version of firefox installed on the remote host is prior to 140.7.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-053 advisory.

    A specially-crafted file can cause libjxl's decoder to read pixel data from uninitialized (but allocated)     memory.

    This can be done by causing the decoder to reference an outside-image-bound area in a subsequent patches.
    An incorrect optimization causes the decoder to omit populating those areas. (CVE-2025-12474)

    A specially-crafted file can cause libjxl's decoder to write pixel data to uninitialized unallocated     memory. Soon after that data from another uninitialized unallocated region is copied to pixel data.

    This can be done by requesting color transformation of grayscale images to another grayscale color space.
    Buffers allocated for 1-float-per-pixel are used as if they are allocated for 3-float-per-pixel. That     happens only if LCMS2 is used as CMS engine. There is another CMS engine available (selected by build     flags). (CVE-2026-1837)

    Heap buffer overflow in libvpx. This vulnerability affects Firefox < 147.0.4, Firefox ESR < 140.7.1,     Firefox ESR < 115.32.1, Thunderbird < 140.7.2, and Thunderbird < 147.0.2. (CVE-2026-2447)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-053 (ALASFIREFOX-2026-053)

high Nessus Plugin ID 301259

Version 1.2

Version 1.1

Version 1.2 Apr 14, 2026, 9:52 AM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202604140952
Version 1.1 Mar 7, 2026, 12:24 AM New Plugin Feed: 202603070024