Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.
https://www.mozilla.org/security/advisories/mfsa2026-11/
https://www.mozilla.org/security/advisories/mfsa2026-10/
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2447.json
https://lists.debian.org/debian-lts-announce/2026/02/msg00028.html
https://bugzilla.redhat.com/show_bug.cgi?id=2440219
https://bugzilla.mozilla.org/show_bug.cgi?id=2014390
https://access.redhat.com/security/cve/CVE-2026-2447
https://access.redhat.com/errata/RHSA-2026:8748
https://access.redhat.com/errata/RHSA-2026:8747
https://access.redhat.com/errata/RHSA-2026:8746
https://access.redhat.com/errata/RHSA-2026:5326
https://access.redhat.com/errata/RHSA-2026:5324
https://access.redhat.com/errata/RHSA-2026:5323
https://access.redhat.com/errata/RHSA-2026:5320
https://access.redhat.com/errata/RHSA-2026:5319
https://access.redhat.com/errata/RHSA-2026:5231
https://access.redhat.com/errata/RHSA-2026:5230
https://access.redhat.com/errata/RHSA-2026:5229
https://access.redhat.com/errata/RHSA-2026:5228
https://access.redhat.com/errata/RHSA-2026:5227
https://access.redhat.com/errata/RHSA-2026:4629
https://access.redhat.com/errata/RHSA-2026:4447
https://access.redhat.com/errata/RHSA-2026:4432
https://access.redhat.com/errata/RHSA-2026:4260
https://access.redhat.com/errata/RHSA-2026:4152
https://access.redhat.com/errata/RHSA-2026:4022
https://access.redhat.com/errata/RHSA-2026:3984
https://access.redhat.com/errata/RHSA-2026:3983
https://access.redhat.com/errata/RHSA-2026:3982
https://access.redhat.com/errata/RHSA-2026:3981
https://access.redhat.com/errata/RHSA-2026:3980
https://access.redhat.com/errata/RHSA-2026:3979
https://access.redhat.com/errata/RHSA-2026:3978
https://access.redhat.com/errata/RHSA-2026:3976
https://access.redhat.com/errata/RHSA-2026:3967
https://access.redhat.com/errata/RHSA-2026:3517
https://access.redhat.com/errata/RHSA-2026:3516
https://access.redhat.com/errata/RHSA-2026:3515
https://access.redhat.com/errata/RHSA-2026:3497
https://access.redhat.com/errata/RHSA-2026:3496
https://access.redhat.com/errata/RHSA-2026:3495
https://access.redhat.com/errata/RHSA-2026:3494
https://access.redhat.com/errata/RHSA-2026:3493
https://access.redhat.com/errata/RHSA-2026:3492
https://access.redhat.com/errata/RHSA-2026:3491
https://access.redhat.com/errata/RHSA-2026:3361
https://access.redhat.com/errata/RHSA-2026:3339