PatchGap
Firefox · Core

CVE-2026-16389

Integer Overflow in Core
Medium firefox Integer Overflow

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactmoderate
DescriptionIncorrect boundary conditions, integer overflow in the Libraries component in NSS
ComponentCore
Bug ClassInteger Overflow
Tracker2043887
CISA KEVNot listed
CreditedTomoya Nakanishi
Disclosed2026-07-21

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page