A vulnerability was found in Mozilla Firefox up to 147.0.3 and classified as critical. This issue affects some unknown processing of the component libvpx. Such manipulation leads to heap-based buffer overflow.

This vulnerability is documented as CVE-2026-2447. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.