Buffer overflow in Mozilla Firefox and Firefox for Android - CVE-2026-7324

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing HTML content. A remote attacker can trick the victim into visiting a specially crafted website, trigger memory corruption and execute arbitrary code on the target system.

Affected software

How to mitigate CVE-2026-7324

External References

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-35/
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=2029419 
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=2029717 
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=2029769 
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=2029886

Related Security Bulletins

• Multiple vulnerabilities in Mozilla Firefox
• Multiple vulnerabilities in Mozilla Thunderbird