Crash report: https://crash-stats.mozilla.org/report/index/1a1f07b3-1190-42a3-a1a5-3b4f70221005

Reason: SIGSEGV / SEGV_MAPERR

Top 10 frames of crashing thread:

0 libxul.so mozilla::a11y::Accessible::FirstChild const accessible/basetypes/Accessible.h:173
0 libxul.so mozilla::a11y::Accessible::HasChildren const accessible/basetypes/Accessible.h:170
0 libxul.so mozilla::a11y::TextLeafPoint::TextLeafPoint accessible/base/TextLeafRange.cpp:471
1 libxul.so mozilla::a11y::TextLeafPoint::FindBoundary const accessible/base/TextLeafRange.cpp:916
2 libxul.so mozilla::a11y::HyperTextAccessibleBase::TextBounds accessible/basetypes/HyperTextAccessibleBase.cpp:210
3 libxul.so mozilla::a11y::RemoteAccessible::TextBounds accessible/ipc/other/RemoteAccessible.cpp:282
4 libxul.so getRangeExtentsCB accessible/atk/nsMaiInterfaceText.cpp:387
5 libatk-bridge-2.0.so.0 impl_GetRangeExtents atk-adaptor/adaptors/text-adaptor.c:675
6 libatk-bridge-2.0.so.0 handle_message droute/droute.c:601
7 libdbus-1.so.3 dbus_connection_dispatch /build/dbus-IAhSsk/dbus-1.12.20/dbus/dbus-connection.c:4576

I have managed to reproduce the issue while browsing on www.google.com and navigating between search results with with the Tab key and with accessibility.cache.enabled set to true and ORCA enabled.

I can not reproduce the issue with a new profile.