CVE-2026-4693: Incorrect boundary conditions in the Audio/Video: Playback component

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade to a fixed release to a version that resolves this vulnerability.

   Fixed in 149
2. Upgrade

   Upgrade to a fixed release to a version that resolves this vulnerability.

   Fixed in 115.34
3. Upgrade

   Upgrade to a fixed release to a version that resolves this vulnerability.

   Fixed in 140.9
4. Upgrade

   Upgrade Firefox to a version that resolves this vulnerability.

   Fixed in 149
5. Upgrade

   Upgrade Firefox ESR to a version that resolves this vulnerability.

   Fixed in 115.34
6. Upgrade

   Upgrade Firefox ESR to a version that resolves this vulnerability.

   Fixed in 140.9
7. Upgrade

   Upgrade Thunderbird to a version that resolves this vulnerability.

   Fixed in 149
8. Upgrade

   Upgrade Thunderbird to a version that resolves this vulnerability.

   Fixed in 140.9

Event History

Parent advisories

This vulnerability appears in the following advisories.

• MFSA2026-20
• MFSA2026-21
• MFSA2026-22
• MFSA2026-24
• MFSA2026-23

Peer vulnerabilities

Found alongside the following vulnerabilities.

• CVE-2026-4684
• CVE-2026-4685
• CVE-2026-4686
• CVE-2026-4687
• CVE-2026-4688
• CVE-2026-4689
• CVE-2026-4690
• CVE-2026-4691
• CVE-2026-4692
• CVE-2026-4693
• CVE-2026-4694
• CVE-2026-4695
• CVE-2026-4696
• CVE-2026-4697
• CVE-2026-4698
• CVE-2026-4699
• CVE-2026-4700
• CVE-2026-4701
• CVE-2026-4722
• CVE-2026-4702
• CVE-2026-4723
• CVE-2026-4724
• CVE-2026-4704
• CVE-2026-4705
• CVE-2026-4706
• CVE-2026-4707
• CVE-2026-4708
• CVE-2026-4709
• CVE-2026-4710
• CVE-2026-4711
• CVE-2026-4725
• CVE-2026-4712
• CVE-2026-4713
• CVE-2026-4714
• CVE-2026-4715
• CVE-2026-4716
• CVE-2026-4717
• CVE-2026-4726
• CVE-2025-59375
• CVE-2026-4727
• CVE-2026-4728
• CVE-2026-4718
• CVE-2026-4719
• CVE-2026-4720
• CVE-2026-4729
• CVE-2026-4721
• CVE-2026-3889
• CVE-2026-4371

Frequently Asked Questions