Summary
It was discovered that libvpx did not properly handle certain malformed
media files. If an application using libvpx opened a specially crafted
file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libvpx | 1.11.0-2ubuntu2.5 |
| Ubuntu · 24.04 LTS 24.04:LTS | libvpx | 1.14.0-1ubuntu2.3 |
| Ubuntu · 25.10 | libvpx | 1.15.0-2.1ubuntu0.1 |
References
-
report
https://ubuntu.com/security/CVE-2026-2447