5.4
Medium
CVE-2026-113400 Uninitialized memory in the Audio/Video: cubeb component
Description
Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 158.0 | earliest → < 158.0.1 | 158.0.1 |
| Thunderbird 158.0 | earliest → < 158.0.1 | 158.0.1 |