Skip to content
OpenAdvisories
High · 8.8 CVE-2026-3845 EUVD-2026-10502GHSA-9c2f-qj2j-769f

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android

Published Mar 10, 2026 · Updated Apr 13, 2026 · Assigned by mozilla

Description

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2.

Affected products

VendorProductAffectedFixed
Mozilla Firefox — 148.0.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling firefox 148.0.2-r0 —

Advisories 2

References