---
id: "CVE-2026-124952"
page: "https://infrastack.ai/live/CVE-2026-124952"
kind: "vulnerability"
aliases: ["CVE-2026-124952"]
title: "Firefox: use-after-free in Audio/Video component may let attackers run code"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["firefox", "firefox-esr", "other"]
not_affected_if: []
published_at: "2026-11-10T14:17:29+00:00"
first_seen_at: "2026-11-10T14:22:20+00:00"
updated_at: "2026-11-10T14:23:51+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124952", "first_seen_at": "2026-11-10T14:22:20+00:00"}]
exploit_sources: []
---

# Firefox: use-after-free in Audio/Video component may let attackers run code

Link for people: https://infrastack.ai/live/CVE-2026-124952 (this .md is for agents)

A use-after-free bug in the Audio/Video component of Firefox ESR can corrupt memory when media is processed. The sources do not state what an attacker gets beyond that, and the description gives no detail on how it is triggered.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Firefox ESR version against the fixed release named in the sources (`115.45`)

## Fix

- Firefox ESR: `115.45`

## Timeline

- 2026-11-10T14:22:20+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124952

## From the sources

Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_