CVE-2026-8946: Incorrect boundary conditions in the Audio/Video: Web Codecs component
Incorrect boundary conditions in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8946?
CVE-2026-8946 has been categorized as a moderate severity vulnerability that affects the Audio/Video: Web Codecs component.
How do I fix CVE-2026-8946?
To fix CVE-2026-8946, upgrade to Firefox version 151, Firefox ESR version 115.36, or the respective updated versions of Thunderbird.
Which products are affected by CVE-2026-8946?
CVE-2026-8946 impacts Mozilla Firefox and Thunderbird versions below 151 and 151 respectively, as well as Firefox ESR versions below 115.36.
What are the new versions available to mitigate CVE-2026-8946?
The newly available versions to mitigate CVE-2026-8946 are Firefox 151, Firefox ESR 115.36, Thunderbird 151, and Thunderbird 140.11.
What type of vulnerability is CVE-2026-8946?
CVE-2026-8946 is characterized as an incorrect boundary condition vulnerability in the Web Codecs component.