Undefined Behavior in WebRTC Signaling of Firefox <149
CVE-2026-4718 Published on March 24, 2026

Undefined behavior in the WebRTC: Signaling component
Undefined behavior in the WebRTC: Signaling component. This vulnerability affects Firefox < 149, Firefox ESR < 140.9, Thunderbird < 149, and Thunderbird < 140.9.

NVD


Products Associated with CVE-2026-4718

Want to know whenever a new CVE is published for Mozilla products? stack.watch will email you.

 
 
 

Affected Versions

Mozilla Firefox: Mozilla Firefox ESR: Mozilla Thunderbird: Mozilla Thunderbird: