CVE-2015-4479: Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38....

Security readout for executives and security teams

This is an old Mozilla Firefox media-parsing flaw. A malicious MPEG-4 video could trigger integer overflows in libstagefright and potentially run attacker-controlled code. The provided bundle names Firefox before 40.0 and Firefox ESR 38.x before 38.2 as affected. Exposure is most likely on legacy systems running Firefox before 40.0 or Firefox ESR 38.x before 38.2, including OS-packaged Mozilla builds referenced by Linux vendor advisories. Current, supported Firefox installations are unlikely to match the named affected versions. Prioritize remediation for any remaining legacy browser estate. The business risk is code execution from media content, but urgency depends on whether affected 2015-era Firefox versions still exist in the environment. Mitigation focus: Upgrade Firefox to 40.0 or later where applicable.; Upgrade Firefox ESR 38.x to 38.2 or later.; Apply relevant OS vendor security updates for packaged Firefox builds..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.