PT-2026-24211 · Mozilla · Firefox For Android

Crixer · CVE-2026-3845 · Published 2026-03-10 · Updated 2026-03-19

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 148.0.2

Description A heap buffer overflow exists in the Audio/Video: Playback component of Firefox for Android. This issue may allow for unexpected behavior or potentially compromise the system.

Recommendations Update Firefox for Android to version 148.0.2 or later.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2026-03320

CVE-2026-3845

Affected Products

Firefox For Android

References · 9

• https://bdu.fstec.ru/vul/2026-03320 · Security Note
• https://mozilla.org/security/advisories/mfsa2026-19 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3845 · Security Note
• https://osv.dev/vulnerability/CVE-2026-3845 · Vendor Advisory
• https://twitter.com/TheHackerWire/status/2031435009895420327 · Twitter Post
• https://twitter.com/xvonfers/status/2032086657374306470 · Twitter Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=2020174 · Note
• https://twitter.com/CveFindCom/status/2031455583249826268 · Twitter Post
• https://twitter.com/CVEnew/status/2034520447027421204 · Twitter Post