CVE-2014-1542: Mozilla Firefox

Medium severity, CVSS 6.8. EPSS: 5.3% chance of exploitation in the next 30 days.

Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted AudioBuffer channel count and sample rate.

Affected products

• Mozilla Firefox: up to and including 29.0.1
• Opensuse Opensuse: version 13.1 only
• Opensuse Project Opensuse: version 12.3 only
• Oracle Solaris: version 11.3 only

Published 2014-06-11. Last modified 2026-06-17.