CVE-2026-16395 is an integer overflow vulnerability affecting the Audio/Video component of Mozilla Firefox. The flaw could lead to severe impacts including complete compromise of confidentiality, integrity, and availability of the affected system. Mozilla fixed this vulnerability in Firefox 153. The CVSS v3.1 base score is 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. No known exploits in the wild have been reported at the time of this advisory.

Successful exploitation of this integer overflow vulnerability could allow an attacker to execute arbitrary code, cause denial of service, or otherwise compromise the affected system's confidentiality, integrity, and availability. The CVSS score of 9.8 reflects the critical nature of this vulnerability with high impact on all security properties.

This vulnerability is fixed in Mozilla Firefox version 153. Users and administrators should update to Firefox 153 or later to mitigate this issue. No additional mitigation steps are required beyond applying the official update.