CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16350 Incorrect boundary conditions in the Audio/Video: cubeb component

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

CVE-2026-16350

CVE-2026-16350 affects Mozilla Firefox and Firefox ESR (Audio/Video: cubeb). The issue is caused by incorrect boundary conditions in cubeb, with a remediation by upgrading to Firefox 153, Firefox ESR 115.38, or Firefox ESR 140.13. Public CVSS 3.1 vector indicates NETWORK attack, no user interacti...

CVE-2026-16350 Incorrect boundary conditions in the Audio/Video: cubeb component

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

EUVD-2026-46190

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13...

CVE-2026-16350

Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13...

PT-2026-61862

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description Incorrect boundary conditions exist within the Audio/Vide...

KLA91170 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

KLA91164 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Security...

KLA91169 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...

MAL-2025-9019 Malicious code in @malware-test-toxic-cubeb/test-mlw3-toxic-cubeb (npm)

The package @malware-test-toxic-cubeb/test-mlw3-toxic-cubeb was found to contain malicious code...

Malicious code in @malware-test-toxic-cubeb/test-mlw3-toxic-cubeb (npm)

The package @malware-test-toxic-cubeb/test-mlw3-toxic-cubeb was found to contain malicious code...

MAL-2025-35162 Malicious code in test-mlw2-cubeb-swizz (npm)

The package test-mlw2-cubeb-swizz was found to contain malicious code...

Malicious code in test-mlw1-toxic-cubeb (npm)

The package test-mlw1-toxic-cubeb was found to contain malicious code...

MAL-2025-34814 Malicious code in test-mlw1-toxic-cubeb (npm)

The package test-mlw1-toxic-cubeb was found to contain malicious code...

Malicious code in test-mlw2-cubeb-swizz (npm)

The package test-mlw2-cubeb-swizz was found to contain malicious code...

MAL-2025-36485 Malicious code in test-mlw2-toxic-cubeb (npm)

The package test-mlw2-toxic-cubeb was found to contain malicious code...

Malicious code in test-mlw2-toxic-cubeb (npm)

The package test-mlw2-toxic-cubeb was found to contain malicious code...

Mozilla: Use-after-free in cubeb during stream destruction

The Mozilla Foundation Security Advisory describes this flaw as: When a device was changed while a stream was about to be destroyed, the stream-reinit task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash...