CVE-2026-4724
Undefined behavior in the Audio/Video component.
Published Mar 24, 2026 · updated Jun 17, 2026 · mozilla firefox
Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 24, 2026 · NIST NVD
Detected
Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Jun 17, 2026 · NIST NVD
Updated
Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
Affected
- cpe mozilla/firefoxversion unspecified
- cpe mozilla/thunderbirdversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-4724
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-4724
Undefined behavior in the Audio/Video component. This vulnerability was fixed in Firefox 149 and Thunderbird 149.
nvd.nist.gov