---
id: "CVE-2026-124865"
page: "https://infrastack.ai/live/CVE-2026-124865"
kind: "vulnerability"
aliases: ["CVE-2026-124865"]
title: "Firefox: use-after-free in Audio/Video component may allow code execution"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["browsers", "firefox", "other"]
not_affected_if: []
published_at: "2026-11-10T14:17:18+00:00"
first_seen_at: "2026-11-10T14:22:14+00:00"
updated_at: "2026-11-10T14:26:31+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124865", "first_seen_at": "2026-11-10T14:22:14+00:00"}]
exploit_sources: []
---

# Firefox: use-after-free in Audio/Video component may allow code execution

Link for people: https://infrastack.ai/live/CVE-2026-124865 (this .md is for agents)

A use-after-free bug in the Audio/Video component of Firefox was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7. The sources do not state what an attacker can do with it beyond the memory corruption itself.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Firefox version in Firefox's About dialog (Help > About Firefox) and compare it to the fixed versions `160`, `115.45` and `153.7`.

## Fix

- Firefox: `160`
- Firefox ESR: `115.45` and `153.7`

## Timeline

- 2026-11-10T14:22:14+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124865

## From the sources

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 160, Firefox ESR 115.45, and Firefox ESR 153.7.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_