PatchGap
Firefox · Core

CVE-2026-4718

Logic Error in Core
Low firefox Logic Error

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactlow
DescriptionUndefined behavior in the WebRTC: Signaling component
ComponentCore
Bug ClassLogic Error
Tracker2014864
CISA KEVNot listed
CreditedEvyatar Ben Asher, Keane Lucas, Nicholas Carlini, Newton Cheng, Daniel Freeman, Alex Gaynor, and Joel Weinberger using Claude from Anthropic
Disclosed2026-03-24

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page