Uninitialized memory in the Audio/Video: cubeb component. (CVE-2026-113400)
Description
An uninitialized memory vulnerability exists in the Audio/Video cubeb component, which was fixed in Firefox version 158.0.1. The flaw could lead to limited confidentiality and integrity impacts but does not affect availability. The vulnerability has a medium severity score of 5.4 and requires user interaction for exploitation.
CVSS v3.1
Score 5.4medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-113400 describes an uninitialized memory vulnerability in the Audio/Video cubeb component. This issue was addressed and fixed in Firefox 158.0.1. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity level. The attack vector is network-based with low attack complexity and no privileges required, but user interaction is necessary. The impact affects confidentiality and integrity to a limited extent, with no impact on availability.
Potential Impact
The vulnerability could allow an attacker to gain limited access to uninitialized memory contents, potentially leaking sensitive information or causing minor integrity issues. There is no impact on system availability. Exploitation requires user interaction, reducing the likelihood of automated exploitation.
Mitigation Recommendations
Users and administrators should update Firefox to version 158.0.1 or later to remediate this vulnerability. Since the vendor has provided an official fix, applying this update fully mitigates the risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-g7j6-rpw4-wgpx
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-113400"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad7ec1f2cdf04f6566afd98
Added to database: 10/20/2026, 22:33:03 UTC
Last enriched: 10/20/2026, 22:33:49 UTC
Last updated: 10/21/2026, 02:48:08 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.