CVE-2026-2447
High · 8.8CVSS
8.8
EPSS
0.7%
Published
Feb 16, 2026
CISA due date
—
The record
Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | firefox | 0 | 148.0-r0 |
| Chainguard | firefox-esr | 0 | 140.8.0-r0 |
| Mageia:9 | libvpx | 0 | 1.12.0-1.5.mga9 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 SP7 | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | MozillaThunderbird | 0 | 140.7.2-150200.8.257.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP7 | MozillaThunderbird | 0 | 140.7.2-150200.8.257.1 |
| Wolfi | firefox | 0 | 148.0-r0 |
| openSUSE:Leap 15.6 | MozillaFirefox | 0 | 140.7.1-150200.152.219.1 |
| openSUSE:Leap 15.6 | MozillaThunderbird | 0 | 140.7.2-150200.8.257.1 |
| openSUSE:Leap 16.0 | MozillaFirefox | 0 | 140.7.1-160000.1.1 |
| openSUSE:Leap 16.0 | MozillaThunderbird | 0 | 140.8.1-bp160.1.1 |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 147.0.4-1.1 |
| openSUSE:Tumbleweed | MozillaThunderbird | 0 | 140.7.2-1.1 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 140.7.1-1.1 |
Related vulnerabilities
- CVE-2026-4726 Denial-of-service in the XML component. Also affects firefox
- CVE-2026-4724 Undefined behavior in the Audio/Video component. Also affects firefox
- CVE-2026-4729 Memory safety bugs present in Firefox 148 and Thunderbird 148. Also affects firefox
- CVE-2026-4722 Privilege escalation in the IPC component. Also affects firefox
- CVE-2026-4723 Use-after-free in the JavaScript Engine component. Also affects firefox
- CVE-2026-4727 Denial-of-service in the Libraries component in NSS. Also affects firefox
- CVE-2026-4728 Spoofing issue in the Privacy: Anti-Tracking component. Also affects firefox
- CVE-2026-4725 Sandbox escape due to use-after-free in the Graphics: Canvas2D component. Also affects firefox