Log in / Sign up

Vulnerability details

CVE-2026-6748

Red Hat Enterprise Linux 10

Uninitialized memory in the Audio/Video: Web Codecs component

CVSS 3.1
7.5High

Official description

Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

CVSS scores

ScoreVersionSourceVector
9.8Critical 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
7.5High 3.1 CVEProject cvelistV5 (CNA) (redhat-SADP) CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)
Red Hat Red Hat Enterprise Linux 10 All CVEProject cvelistV5 (CNA)

References and advisories

35
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-04-21
Last updated
2026-07-15
State
Published
Assigner (CNA)
mozilla

Exploit prediction (EPSS)

0.39%
Probability of exploitation in 30 days
34.2%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-457
    Use of Uninitialized Variable
  • CWE-824
    Access of Uninitialized Pointer