4.3
Medium
CVE-2026-100783 Uninitialized memory in the Audio/Video component
Description
Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 157 | earliest → < 157 | 157 |
| Firefox 153.4 | earliest → < 153.4 | 153.4 |
| Firefox 140.17 | earliest → < 140.17 | 140.17 |
| Firefox 115.42 | earliest → < 115.42 | 115.42 |
| Thunderbird 157 | earliest → < 157 | 157 |
| Thunderbird 153.4 | earliest → < 153.4 | 153.4 |
| Thunderbird 140.17 | earliest → < 140.17 | 140.17 |