Preliminary research

Firefox / WebRTC Encoded Transforms: UAF via undetached ArrayBuffer (CVE-2025-14321)

AISLE Research Team · AISLE · 21 January 2026

AI-collected research leads through 2 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Finds a Firefox WebRTC encoded-transform lifetime error where JavaScript keeps an ArrayBuffer alias after its native frame storage is released. The stale buffer supplies heap read and write primitives suitable for developing a browser code-execution exploit.

Record

Researcher

AISLE Research Team

Published by

AISLE

Date

21 January 2026

In the archive

• Collected in the 2026 preliminary research sweep

Tags

• browser
• firefox
• webrtc
• use-after-free
• memory-corruption
• javascript
• rce

This page is the archive's own catalogue record. The research is the work of AISLE Research Team, first published at the original source. Preserved copies are kept so the citation survives its host.