CVE-2026-3845: Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android
Published Mar 10, 2026
·Updated
Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android. This vulnerability was fixed in Firefox 148.0.2.
Affected Software
3 affected componentsFixes available
Mozilla Firefox for Android<148.0.2
Mozilla Firefox<148.0.2
148.0.2
Mozilla Firefox Android<148.0.2
Event History
Mar 10, 2026
CVE Published
via Mozilla·12:00 AM
Data Sourced
via Mozilla·12:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·03:03 PM
Data Sourced
via MITRE·03:03 PM
Description
Data Sourced
via NVD·06:19 PM
DescriptionSeverityWeaknessAffected Software
May 6, 58175
Event
via FIRST·12:41 PM
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2026-3845?
CVE-2026-3845 is classified as a high severity vulnerability due to the potential for heap buffer overflows that could lead to application crashes or arbitrary code execution.
2
How do I fix CVE-2026-3845?
To fix CVE-2026-3845, update Firefox for Android to version 148.0.2 or later.
3
Who is affected by CVE-2026-3845?
Users of Firefox for Android versions prior to 148.0.2 are affected by CVE-2026-3845.
4
What kind of vulnerability is CVE-2026-3845?
CVE-2026-3845 is a heap buffer overflow vulnerability in the Audio/Video Playback component of Firefox for Android.
5
When was CVE-2026-3845 disclosed?
CVE-2026-3845 was disclosed as part of Mozilla's security advisories in 2026.