Live › vulnerability › CVE-2026-117873
Go to dashboardIncorrect boundary conditions in Firefox's Audio/Video Playback component can be triggered, per the sources without a stated impact. The sources do not say what an attacker gets beyond the memory-safety class of the flaw.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than the fixed releases, including desktop installs and ESR deployments. The sources do not say whether any particular media content or configuration is required to trigger it.
No product ranges from the sources yet.
firefox --version and compare against 159, 115.44 (ESR) and 153.6 (ESR)159, or Firefox ESR to 115.44 or 153.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117873")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.