9.8
Critical
CVE-2026-8091 Incorrect boundary conditions in the Audio/Video: Playback component
Description
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 150 | earliest → < 150 | 150 |
| Firefox 140.10 | earliest → < 140.10.1 | 140.10.1 |
| Firefox 115.35 | earliest → < 115.35.2 | 115.35.2 |
| Thunderbird 150 | earliest → < 150 | 150 |
| Thunderbird 140.10 | earliest → < 140.10.1 | 140.10.1 |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published |