PatchGap
Firefox · DOM

CVE-2026-84145

Memory Corruption in DOM
High firefox Memory Corruption 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impacthigh
DescriptionInternally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited.
ComponentDOM
Bug ClassMemory Corruption
Tracker2054640
Fix commit00fef1cb6705 (firefox) +2/-0
CISA KEVNot listed
CreditedLeo Tenenbaum, Tom Ritter and the Mozilla Fuzzing Team
Disclosed2026-09-01

Files Changed

  • dom/media/mediaelement/HTMLMediaElement.cpp

Patch

view commit
diff --git a/dom/media/mediaelement/HTMLMediaElement.cpp b/dom/media/mediaelement/HTMLMediaElement.cpp
index b106629ebc2..d0fd7b904e1 100644
--- a/dom/media/mediaelement/HTMLMediaElement.cpp
+++ b/dom/media/mediaelement/HTMLMediaElement.cpp
@@ -2652,6 +2652,8 @@ void HTMLMediaElement::AbortExistingLoads() {
 
   RemoveMediaElementFromURITable();
   mLoadingSrcTriggeringPrincipal = nullptr;
+  // The CORS mode is scoped to the current load.
+  mCORSMode = CORS_NONE;
   DDLOG(DDLogCategory::Property, "loading_src", "");
   DDUNLINKCHILD(mMediaSource.get());
   mMediaSource = nullptr;
Loading diff…
On This Page