High DSA-6143-1 1 CVE

libvpx - security update

Published Feb 19, 2026 · Updated Feb 19, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 12	libvpx	1.12.0-1+deb12u5
Debian · 13	libvpx	1.15.0-2.1+deb13u1

Vulnerabilities 1

High 8.8

CVE-2026-2447

Heap buffer overflow in libvpx

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

Feb 16, 2026