CVE-2026-2757

Modified Modified - Updated After Analysis

Boundary Error in Firefox WebRTC Audio/Video Component

Publication date: 2026-02-24

Last updated on: 2026-06-30

Assigner: Mozilla Corporation

Description

Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-02-24

Last Modified

2026-06-30

Generated

2026-07-06

AI Q&A

2026-02-24

EPSS Evaluated

2026-07-05

NVD

CVE-2026-2757

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	firefox	to 148.0 (exc)
mozilla	thunderbird	to 148.0 (exc)
mozilla	firefox	to 115.33.0 (exc)
mozilla	firefox	From 128.0 (inc) to 140.8.0 (exc)
mozilla	thunderbird	to 140.8.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1384	The product does not properly handle unexpected physical or environmental conditions that occur naturally or are artificially induced.

Attack-Flow Graph

Executive Summary

CVE-2026-2757 is a high-impact security vulnerability found in Firefox versions prior to 148 and Firefox ESR versions prior to 115.33 and 140.8. It involves incorrect boundary conditions in the WebRTC Audio/Video component, meaning that the software improperly handles boundary checks within the WebRTC module responsible for audio and video processing.

This flaw could lead to security issues such as memory corruption or other exploitation risks because the boundary checks are not correctly enforced.

Impact Analysis

The vulnerability could allow attackers to exploit the improper boundary checks in the WebRTC Audio/Video component, potentially causing memory corruption.

Memory corruption can lead to serious security consequences, including arbitrary code execution, crashes, or other unexpected behavior that compromises the security and stability of the affected Firefox browser.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

To mitigate the CVE-2026-2757 vulnerability, you should update your Firefox or Firefox ESR browser to the fixed versions.

Upgrade Firefox to version 148 or later.
Upgrade Firefox ESR to version 115.33 or later.
Upgrade Firefox ESR to version 140.8 or later.

These updates include patches that fix the incorrect boundary conditions in the WebRTC Audio/Video component, preventing potential memory corruption and exploitation.

Hi! I’m here to help you understand CVE-2026-2757. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70