High DLA-4489-1 1 CVE

libvpx - security update

Published Feb 22, 2026 · Updated Feb 22, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	libvpx	1.9.0-1+deb11u5

Vulnerabilities 1

High 8.8

CVE-2026-2447

Heap buffer overflow in libvpx

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

Feb 16, 2026