Live › vulnerability › CVE-2026-113400
Go to dashboardThe cubeb audio component in Firefox and Thunderbird reads uninitialized memory. The sources do not say what an attacker can do with the leaked or misused memory beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Desktop users of Firefox and Thunderbird older than 158.0.1 are affected. Servers and tooling that do not run these browsers or mail clients have no exposure from this entry. The sources do not say whether any particular platform or audio configuration is required.
No product ranges from the sources yet.
firefox --version and the Thunderbird version with thunderbird --version.158.0.1.158.0.1 or later.158.0.1 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-113400")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.