CVE-2026-2773 is a critical memory safety vulnerability identified as incorrect boundary conditions in the Web Audio component of Mozilla Firefox. This flaw was addressed and fixed in Firefox 148 and Firefox ESR 115.33. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high exploitability and impact with network attack vector, no privileges required, and no user interaction needed. The issue is part of a broader set of memory safety bugs fixed in these releases. The vendor advisory confirms the fix and recommends updating to the patched versions.

Successful exploitation of this vulnerability could result in complete compromise of confidentiality, integrity, and availability of the affected Firefox browser. This includes potential arbitrary code execution due to memory corruption stemming from incorrect boundary checks in the Web Audio component. The vulnerability is rated critical with a CVSS score of 9.8. No active exploitation in the wild has been reported.

Mozilla has released official fixes for this vulnerability in Firefox 148 and Firefox ESR 115.33. Users and administrators should update affected Firefox installations to these versions or later to remediate the issue. Since this is a client-side application, patching is the primary mitigation. No additional vendor-recommended mitigations or workarounds are indicated.