HarborGuard / CVE
Back to search
HIGHCVE-2026-2447Published Modified CNA mozilla

CVE-2026-2447: Heap buffer overflow in libvpx

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.

Metrics

CVSS v3.1
8.8
Severity
HIGH
Fixed in
115.32.1
Affected Products
2

Fix available

115.32.1140.7.1140.7.2147.0.2147.0.4
Affected packages
  • Mozilla / Firefox
    Fixed in 115.32.1, 140.7.1, 147.0.4
  • Mozilla / Thunderbird
    Fixed in 140.7.2, 147.0.2
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References