{"id":"CVE-2026-124937","kind":"vulnerability","aliases":["CVE-2026-124937"],"related":[],"title":"Firefox for Android: unspecified Media component flaw fixed in 160","description":"Other issue in the Media component in Firefox for Android. This vulnerability was fixed in Firefox 160.","summary":"Firefox for Android has an unspecified security issue in its Media component, fixed in Firefox 160. The sources do not say what an attacker can do with it.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Firefox for Android","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["android","firefox","other"],"not_affected_if":["firefox-160-or-later"],"how_to_check":"- Check the installed Firefox for Android version in the app's About page; the sources do not name a specific command.","fix":"- Firefox for Android: `160` or later, per the description.","status":"open","published_at":"2026-11-10T14:17:27+00:00","first_seen_at":"2026-11-10T14:22:19+00:00","triaged_at":"2026-11-10T14:24:08+00:00","updated_at":"2026-11-10T14:24:08+00:00","category":"other","confidence":0.35,"triage":{"at":"2026-11-10T14:24:08Z","model":"claude-haiku-5-5","output":{"fix":"- Firefox for Android: `160` or later, per the description.","reach":"unknown","title":"Firefox for Android: unspecified Media component flaw fixed in 160","impact":"medium","summary":"Firefox for Android has an unspecified security issue in its Media component, fixed in Firefox 160. The sources do not say what an attacker can do with it.","audience":"everyone","category":"other","nicknames":[],"who_cares":["firefox","android"],"confidence":0.35,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; the sources do not describe the impact","analyst_note":"Find the Mozilla security advisory for this CVE to confirm impact, trigger conditions and the exact fixed version.","how_to_check":"- Check the installed Firefox for Android version in the app's About page; the sources do not name a specific command.\n- unknown","plain_action":"Update Firefox on your Android phone to version 160 or later.","product_name":"Firefox for Android","needs_analyst":true,"not_affected_if":["firefox-160-or-later"],"who_is_affected":"Users of Firefox for Android older than version 160. The sources do not describe the data path or configuration needed to trigger it.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000681,"input_tokens":4461,"output_tokens":470,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-124937':13A,16A '-2026':12A,15A '160':10A,37B,62C 'android':3A,19A,20B,24B,55C 'attack':45B 'compon':6A,33B,51C 'cve':11A,14A 'firefox':1A,17A,21B,22B,36B,53C,61C 'fix':8A,34B,59C 'flaw':7A 'for':18A 'issu':29B,47C 'media':5A,32B,50C 'say':42B 'secur':28B 'sourc':39B 'unspecifi':4A,27B 'vulner':57C","nicknames":[],"mitigations":[],"who_affected":"Users of Firefox for Android older than version 160. The sources do not describe the data path or configuration needed to trigger it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Firefox on your Android phone to version 160 or later.","pkeys":["firefoxforandroid","forandroid"],"ptokens":["android","firefox","for"],"labels":["android","firefox","other","unknown","vendor"],"campaign_type":null,"search_a":"'-124937':13A,16A '-2026':12A,15A '160':10A 'android':3A,19A 'compon':6A 'cve':11A,14A 'firefox':1A,17A 'fix':8A 'flaw':7A 'for':18A 'media':5A 'unspecifi':4A","search_b":"'160':37B 'android':20B,24B 'attack':45B 'compon':33B 'firefox':21B,22B,36B 'fix':34B 'issu':29B 'media':32B 'say':42B 'secur':28B 'sourc':39B 'unspecifi':27B","search_c":"'160':62C 'android':55C 'compon':51C 'firefox':53C,61C 'fix':59C 'issu':47C 'media':50C 'vulner':57C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T14:17:27+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-124937","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124937","severity":null,"published_at":"2026-11-10T14:17:27+00:00","modified_at":"2026-11-10T14:17:27+00:00","first_seen_at":"2026-11-10T14:22:19+00:00","fetched_at":"2026-11-10T14:22:19+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}