Invalid Pointer Vulnerability in Firefox’s Audio/Video Playback Component
CVE-2026-6778

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
21 April 2026

What is CVE-2026-6778?

An invalid pointer dereference has been identified in Firefox's Audio/Video playback component, posing significant implications for user security. This flaw can be exploited by attackers to manipulate media playback functionality, potentially leading to crashes and unauthorized access to sensitive data. Mozilla has addressed this issue in Firefox version 150, urging users to update promptly to ensure protection against possible exploits.

Affected Version(s)

Firefox 150

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

chanhokim
.