UBUNTU-CVE-2026-124952: Use After Free
Published Nov 12, 2026
·Updated
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
Affected Software
10 affected components
ubuntu/mozjs52*
ubuntu/mozjs38*
ubuntu/mozjs68*
ubuntu/mozjs52*
ubuntu/mozjs102*
ubuntu/mozjs78*
ubuntu/mozjs91*
ubuntu/thunderbird*
ubuntu/mozjs102*
ubuntu/mozjs115*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.45
Event History
Nov 12, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which listed packages should be checked for exposure?
The affected software list includes Ubuntu mozjs38, mozjs52, mozjs68, mozjs78, mozjs91, mozjs102, mozjs115, and Thunderbird packages. Check the installed package versions and Ubuntu security status for each of these components in your environment.
2
What fixed version is identified?
The vulnerability was fixed in Firefox ESR 115.45. No fixed versions for the listed Ubuntu packages are provided in the available data.