Buffer overflow in Mozilla products - CVE-2026-84143

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to memory corruption in multiple unspecified components when processing crafted web content. A remote attacker can trigger a security-relevant defect to execute arbitrary code.

The advisory describes multiple internally found bugs, some of which showed evidence of memory corruption or another security-relevant defect.

Affected software

How to mitigate CVE-2026-84143

External References

• https://www.mozilla.org/en-US/security/advisories/mfsa2026-84/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-82/
• https://www.mozilla.org/en-US/security/advisories/mfsa2026-85/
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=2048793%2C2054645%2C2057114%2C2059109%2C2061287

Related Security Bulletins

• Multiple vulnerabilities in Mozilla Firefox