CVE-2026-8954

High

Published: 19/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2026-8954 involves incorrect boundary conditions and integer overflow in the Audio/Video component. This issue has been fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Risk Assessment

This vulnerability could lead to unexpected application behavior, potentially compromising user data security. If exploited, an attacker may gain access to sensitive information.

Recommendation

It is recommended to update to the latest versions of Firefox and Thunderbird to mitigate this vulnerability. Regular software updates are crucial for maintaining system security.

Original NVD description (English source)

Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.