Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-16359: Firefox Audio/Video Component Boundary Error

CVE-2026-16359 CVE-2026-16359

Summary

The Firefox browser's audio and video component has a security issue that could allow an attacker to execute malicious code. This issue has been fixed in recent versions of Firefox, so it's essential to update to the latest version to stay secure.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions
mozilla	firefox	All versions

Original title

Incorrect boundary conditions in the Audio/Video: GMP component

Original description

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, and Firefox ESR 140.13.

Vulnerability type

CWE-119 Buffer Overflow

https://bugzilla.mozilla.org/show_bug.cgi?id=2045424
https://www.mozilla.org/security/advisories/mfsa2026-68/
https://www.mozilla.org/security/advisories/mfsa2026-69/
https://www.mozilla.org/security/advisories/mfsa2026-70/

Published: 21 Jul 2026 · Updated: 22 Jul 2026 · First seen: 21 Jul 2026