description: A hashtable  in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox < 118.
problem types: Memory Corruption in Ion Hints
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 118, status: affected, version: unspecified, versionType: custom
}