CVE-2025-14326: Use-after-free in the Audio/Video: GMP component
Use-after-free in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 146 and Thunderbird 146.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 146 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 146 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 146
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-14326?
CVE-2025-14326 has a high severity rating due to the potential for exploitation via a use-after-free condition.
How do I fix CVE-2025-14326?
To fix CVE-2025-14326, update to Mozilla Firefox version 146 or later.
Which versions of Firefox are affected by CVE-2025-14326?
CVE-2025-14326 affects all versions of Firefox prior to version 146.
What types of attacks can exploit CVE-2025-14326?
CVE-2025-14326 can potentially be exploited through crafted media content or web pages that trigger use-after-free vulnerabilities.
Is there a workaround for CVE-2025-14326 if I cannot update Firefox?
There are no specific workarounds for CVE-2025-14326, and the best mitigation is to upgrade to a patched version of Firefox.