PatchGap
Firefox · DOM

CVE-2026-6781

Logic Error in DOM
Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionDenial-of-service in the Audio/Video: Playback component
ComponentDOM
Bug ClassLogic Error
Tracker2025583
Fix commit8859aa94bcf8 (firefox) +2/-2
CISA KEVNot listed
CreditedLatticeBased
Disclosed2026-04-21

Files Changed

  • dom/media/ipc/RemoteMediaData.cpp

Patch

view commit
diff --git a/dom/media/ipc/RemoteMediaData.cpp b/dom/media/ipc/RemoteMediaData.cpp
index 1ef723e9e05..784ebddf0eb 100644
--- a/dom/media/ipc/RemoteMediaData.cpp
+++ b/dom/media/ipc/RemoteMediaData.cpp
@@ -388,8 +388,8 @@ IPC::ParamTraits<mozilla::ArrayOfRemoteAudioData::RemoteAudioData>::Write(
 IPC::ParamTraits<mozilla::ArrayOfRemoteAudioData::RemoteAudioData>::Read(
     IPC::MessageReader* aReader, paramType* aVar) {
   return ReadParam(aReader, &aVar->mBase) &&
-         ReadParam(aReader, &aVar->mChannels) &&
-         ReadParam(aReader, &aVar->mRate) &&
+         ReadParam(aReader, &aVar->mChannels) && aVar->mChannels > 0 &&
+         ReadParam(aReader, &aVar->mRate) && aVar->mRate > 0 &&
          ReadParam(aReader, &aVar->mChannelMap) &&
          ReadParam(aReader, &aVar->mOriginalTime) &&
          ReadParam(aReader, &aVar->mTrimWindow) &&
Loading diff…
On This Page