CVE-2026-2447
Heap buffer overflow in libvpx
CVSS Score
8.8
EPSS Score
0.6%
EPSS Percentile
45th
Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.
| Vendor | mozilla |
| Product | firefox |
| Ecosystems | |
| Industries | Technology |
| Published | Feb 16, 2026 |
| Last Updated | Jul 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for mozilla firefox
Be the first to know when new high vulnerabilities affecting mozilla firefox are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Mozilla / Firefox
All versions affected Mozilla / Thunderbird
All versions affected References
bugzilla.mozilla.org: https://bugzilla.mozilla.org/show_bug.cgi?id=2014390 mozilla.org: https://www.mozilla.org/security/advisories/mfsa2026-10/ mozilla.org: https://www.mozilla.org/security/advisories/mfsa2026-11/ lists.debian.org: https://lists.debian.org/debian-lts-announce/2026/02/msg00028.html access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-2447 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2440219 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2447.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3984 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5320 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3976 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5227 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4260 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3361 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4629 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3517 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3338 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3967 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3515 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3492 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5228 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4432 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3491 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5323 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3980 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3495 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5229 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3979 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3494 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5230 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4022 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3493 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5326 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3983 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4152 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3978 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3496 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5324 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3981 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3497 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:5231 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3982 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3339 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:4447 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3516 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8748 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8746 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:8747 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:16174
Credits
jayjayjazz