← Database

CVE-2026-8954

HIGH CVSS: 7.5 Published: 2026-05-19 Modified: 2026-06-17

Description

Incorrect boundary conditions, integer overflow in the Audio/Video component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Affected Platforms

Mozilla FirefoxMozilla Thunderbird

Weakness Type

CWE-119

References