CVE-2026-8091: Incorrect boundary conditions in the Audio/Video: Playback component
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 140.10.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 115.35.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 140.10.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 150 - Upgrade
Upgrade
Mozilla Firefoxto a version that resolves this vulnerability.Fixed in 150 - Upgrade
Upgrade
Mozilla Thunderbirdto a version that resolves this vulnerability.Fixed in 150 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 140.10.1 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 140.10.1 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.35.2
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-8090
- CVE-2026-8091
- CVE-2026-8094
- CVE-2026-8092
- CVE-2026-7320
- CVE-2026-7321
- CVE-2026-7322
- CVE-2026-7323
- CVE-2026-6746
- CVE-2026-6747
- CVE-2026-6748
- CVE-2026-6749
- CVE-2026-6750
- CVE-2026-6751
- CVE-2026-6752
- CVE-2026-6753
- CVE-2026-6754
- CVE-2026-6755
- CVE-2026-6757
- CVE-2026-6758
- CVE-2026-6759
- CVE-2026-6760
- CVE-2026-6761
- CVE-2026-6762
- CVE-2026-6763
- CVE-2026-6764
- CVE-2026-6765
- CVE-2026-6766
- CVE-2026-6767
- CVE-2026-6768
- CVE-2026-6769
- CVE-2026-6770
- CVE-2026-6771
- CVE-2026-6772
- CVE-2026-6773
- CVE-2026-6774
- CVE-2026-6775
- CVE-2026-6776
- CVE-2026-6777
- CVE-2026-6778
- CVE-2026-6779
- CVE-2026-6780
- CVE-2026-6781
- CVE-2026-6782
- CVE-2026-6783
- CVE-2026-6784
- CVE-2026-6785
- CVE-2026-6786
- CVE-2026-6756
Frequently Asked Questions
What is the severity of CVE-2026-8091?
The severity of CVE-2026-8091 is considered high due to incorrect boundary conditions in the Audio/Video: Playback component.
How do I fix CVE-2026-8091?
To fix CVE-2026-8091, update to Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, or Firefox ESR 115.35.2.
Which versions are affected by CVE-2026-8091?
CVE-2026-8091 affects Mozilla Firefox ESR versions up to 140.10.2 and 115.35.2, as well as older versions of Firefox and Thunderbird.
Is CVE-2026-8091 a critical vulnerability?
CVE-2026-8091 is categorized as a high severity vulnerability, which could potentially lead to security risks if not addressed.
What components are impacted by CVE-2026-8091?
CVE-2026-8091 impacts the Audio/Video: Playback component within affected versions of Firefox and Thunderbird.