Mozilla Firefox EUVD-2026-24119

| CVE-2026-6778 MEDIUM
NULL Pointer Dereference (CWE-476)
2026-04-21 mozilla GHSA-xm94-m277-f852
Denial Of Service Null Pointer Dereference Mozilla
5.3
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Apr 21, 2026 - 18:25 vuln.today
CVSS changed
Apr 21, 2026 - 18:22 NVD
5.3 (None) 5.3 (MEDIUM)

DescriptionNVD

Invalid pointer in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150.

AnalysisAI

Denial of service via null pointer dereference in Firefox's Audio/Video Playback component allows remote attackers to crash the browser without user interaction. The vulnerability affects Firefox versions prior to 150 and requires only a network connection to trigger, resulting in availability loss but not code execution or data compromise. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Sign in - Free

Share

EUVD-2026-24119 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy