CVE-2026-2447

Summary

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefox115.32.1 <= 115.*unaffected
MozillaFirefox140.7.1 <= 140.*unaffected
MozillaFirefox147.0.4 <= *unaffected
MozillaThunderbird140.7.2 <= 140.*unaffected
MozillaThunderbird147.0.2 <= *unaffected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

libvpx: Heap buffer overflow in libvpx

Additional References

References