CVE-2016-1946: The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44....

Security readout for executives and security teams

This is an old Firefox media-parsing flaw. A maliciously crafted media metadata structure could make vulnerable Firefox versions read too much data, leading to denial of service and possibly other memory-safety impact. The supplied sources identify Firefox before 44.0; they do not provide CVSS scoring or evidence of active exploitation. Likely exposure is legacy Mozilla Firefox before 44.0, including downstream Linux distribution packages referenced by Ubuntu, openSUSE, and Gentoo advisories. The supplied affected-product metadata is incomplete and says n/a, so validate using vendor package records rather than CPE matching alone. Treat this as a legacy software hygiene issue unless unsupported Firefox remains in use. There is no supplied evidence of active exploitation, but vulnerable browser media parsing can create business disruption and possible memory-safety risk if old builds still handle untrusted content. Mitigation focus: Upgrade Firefox to 44.0 or later where applicable.; Apply relevant Ubuntu, openSUSE, or Gentoo security updates.; Remove unsupported legacy Firefox builds from managed endpoints..

Prepared

Jun 13, 2026, 21:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.