Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5.