firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the WebRTC: Audio/Video component...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...

PT-2026-24211

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 148.0.2 Description A heap buffer overflow exists in the Audio/Video: Playback component of Firefox for Android. This issue may allow for unexpected behavior or potentially compromise the system...

The vulnerability of the get_alias_quirk() function in the sound/usb/card.c module allows a hacker to induce a service failure in Linux-based systems with USB audio devices.

The vulnerability of the getaliasquirk function in the sound/usb/card.c module, which is part of the Linux operating system’s USB device support mechanism, involves the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the __graph_get_type() function in the sound/soc/generic/audio-graph-card2.c module allows a hacker to trigger a service failure in Linux operating system-based SoC audio kernels.

The vulnerability of the graphgettype function in the sound/soc/generic/audio-graph-card2.c module of the Linux operating system’s sound support module is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the q6apm_lpass_dai_prepare() function in the sound/soc/qcom/qdsp6/q6apm-lpass-dais.c file, which is part of the Linux SoC audio support module, allows a hacker to cause a system failure.

The vulnerability of the q6apmlpassdaiprepare function in the sound/soc/qcom/qdsp6/q6apm-lpass-dais.c file, which is related to the sound support for Linux operating system SoCs, involves a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the snd_usbmidi_free() function in the sound/usb/midi.c module allows for exploitation by attackers, causing a service failure. This vulnerability exposes USB audio devices supported by Linux operating systems.

The vulnerability of the sndusbmidifree function in the sound/usb/midi.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

PRoADS: Provably Secure and Robust Audio Diffusion Steganography with Latent Optimization and Backward Euler Inversion

This paper proposes PRoADS, a provably secure and robust audio steganographic framework based on audio diffusion models. As a generative steganography scheme, PRoADS embeds secret messages into the initial noise of diffusion models via orthogonal matrix projection. To address the reconstruction...

CVE-2026-3845: Heap-based Buffer Overflow

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2...

Apple macOS Audio APAC Frame Decoding Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the decoding of audio...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open-source web browser developed by the Mozilla Foundation in the United States. Versions of Mozilla Firefox prior to 148.0.2 contained a security vulnerability, which was caused by a heap buffer overflow in the audio/video playback component...

MGASA-2026-0053 Updated thunderbird packages fix security vulnerabilities

Incorrect boundary conditions in the WebRTC: Audio/Video component. CVE-2026-2757 Use-after-free in the JavaScript: GC component. CVE-2026-2758 Incorrect boundary conditions in the Graphics: ImageLib component. CVE-2026-2759 Sandbox escape due to incorrect boundary conditions in the Graphics:...

firefox: thunderbird: Incorrect boundary conditions in the Web Audio component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Web Audio component...

firefox: thunderbird: Use-after-free in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video: Playback component...

firefox: thunderbird: Integer overflow in the Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Integer overflow in the Audio/Video component...

firefox: thunderbird: Incorrect boundary conditions in the Audio/Video: GMP component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Audio/Video: GMP component...

firefox: thunderbird: Incorrect boundary conditions in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the WebRTC: Audio/Video component...

CLSA-2026-1773056241 kernel: Fix of 21 CVEs

i40e: fix IRQ freeing in i40evsirequestirqmsix error path CVE-2025-39911 - media: rc: fix races with imondisconnect CVE-2025-39993 - VMCI: fix race between vmcihostsetupnotify and vmcictxunsetnotify CVE-2025-38102 - partitions: mac: fix handling of bogus partition table CVE-2025-21772 - tracing:...

firefox: thunderbird: Use-after-free in the Audio/Video: Playback component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Audio/Video: Playback component...