← CVE Intelligence

CVE-2026-2447

Heap buffer overflow in libvpx PUBLISHED

Description (CNA)

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.

Affected (CNA)

Vendor / productVersions
Mozilla / Firefoxunaffected 115.32.1 through 115.*; unaffected 140.7.1 through 140.*; unaffected 147.0.4 through *
Mozilla / Thunderbirdunaffected 140.7.2 through 140.*; unaffected 147.0.2 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

redhat-SADP

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Heap buffer overflow in libvpx.