Advisory severityMedium6.1Red Hat Linux

Medium [CVE-2026-16359] Incorrect boundary conditions in the Audio/Video: GMP component

This medium-severity Red Hat Linux advisory covers CVE-2026-16359 affecting Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-16359 Source published Jul 21, 2026Source updated Jul 21, 2026

VulniPulse record published Jul 24, 2026Record updated Aug 11, 2026

CVE-2026-16359

Affected products & platforms

Red Hat LinuxRed Hat Enterprise Linux

Open source advisory

Get an email when Red Hat Linux RHEL & SELinux publishes the next one.

See Red Hat Linux RHEL & SELinux's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Red Hat Linux RHEL & SELinux

Summary

Incorrect boundary conditions in the Audio/Video: GMP component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory. Red Hat severity: Moderate — CVSS 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).

Weakness: CWE-120.

Affected Red Hat products: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.8 Telecommunications Update Service; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions; Red Hat Enterprise Linux 9.6 Extended Update Support; Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7.

Will not fix / out of support: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 7.

Affected versions

No affected-version range was extracted from the source record. The vendor advisory is authoritative. Check it before change work.

Official advisory · high-confidence parse· fetched 1 month ago·verify at source

Fixed versions

115.38
140.13
firefox-0:140.13.0-1.el10_2
thunderbird-0:140.13.0-1.el10_2
thunderbird-0:140.13.0-1.el10_0
firefox-0:140.13.0-1.el10_0
firefox-0:140.13.0-1.el7_9
firefox-0:140.13.0-1.el8_10
thunderbird-0:140.13.0-1.el8_10
thunderbird-0:140.13.0-1.el8_4
firefox-0:140.13.0-1.el8_4
thunderbird-0:140.13.0-1.el8_6
firefox-0:140.13.0-1.el8_6
thunderbird-0:140.13.0-1.el8_8
firefox-0:140.13.0-1.el8_8
firefox-0:140.13.0-1.el9_8
thunderbird-0:140.13.0-1.el9_8
thunderbird-0:140.13.0-1.el9_2
firefox-0:140.13.0-1.el9_2
thunderbird-0:140.13.0-1.el9_4
firefox-0:140.13.0-1.el9_4
thunderbird-0:140.13.0-1.el9_6
firefox-0:140.13.0-1.el9_6
RHSA-2026:47101
RHSA-2026:49621
RHSA-2026:53445
RHSA-2026:54181
RHSA-2026:54248
RHSA-2026:47105
RHSA-2026:49922
RHSA-2026:53455
RHSA-2026:54180
RHSA-2026:53453
RHSA-2026:54259
RHSA-2026:53454
RHSA-2026:54339
RHSA-2026:47104
RHSA-2026:49921
RHSA-2026:53475
RHSA-2026:54185
RHSA-2026:53444
RHSA-2026:54182
RHSA-2026:53446

Official advisory · high-confidence parse· fetched 1 month ago·verify at source

Mitigation

Upgrade to a fixed release: 115.38, 140.13, firefox-0:140.13.0-1.el10_2, thunderbird-0:140.13.0-1.el10_2, thunderbird-0:140.13.0-1.el10_0, firefox-0:140.13.0-1.el10_0. That is the remediation for this advisory.

The vendor advisory may list interim mitigations or workarounds not captured here. Review it before change work.

Official advisory · high-confidence parse· fetched 1 month ago·verify at source

All Red Hat Linux advisories

Sources

Official and corroborating records used to build this advisory.

Red Hat Security Data APIofficial
Official vendor source used to discover this advisory; it remains the authority for affected products and remediation. Discovered from the machine-readable feed https://access.redhat.com/hydra/rest/securitydata/cve.json; this link opens the Red Hat Linux advisory index instead of the raw feed document.
Red Hat Linux
Official vendor advisoryofficial
Official advisory page fetched and parsed; accepted detail fields are attributed to this page.
Red Hat Linux

Cross-references

Validate CVE metadata against the authoritative registries.

CVE-2026-16359NVD CVE.org MITRE

Free weekly CVE digest

Every Monday: the week's critical and high advisories for Red Hat or every vendor, new CISA KEV entries and upcoming end-of-life dates.

iPhone and Android apps · New on the App Store

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Get CVE alerts on Android See app features

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Medium [CVE-2026-16359] Incorrect boundary conditions in the Audio/Video: GMP component

Get an email when Red Hat Linux RHEL & SELinux publishes the next one.

Summary

Affected versions

Mitigation

More Red Hat Linux advisories

Monitor future Red Hat Linux CVEs from your phone.

Discussion(0)