Firefox v147.0.3 Released With Fix for Heap Buffer Overflow Vulnerability
Mozilla has released Firefox version 147.0.3 to address a critical memory-related vulnerability in the browser's media processing library. This update resolves a heap buffer overflow issue that could potentially allow attackers to execute arbitrary code.
Mozilla has released Firefox version 147.0.3 to address a critical memory-related vulnerability in the browser's media processing library. This update resolves a heap buffer overflow issue that could potentially allow attackers to execute arbitrary code.
The fix is part of the Mozilla Foundation Security Advisory 2026-10, enhancing browser security across both the desktop and Extended Support Release (ESR) versions. The vulnerability, identified as CVE-2026-2447, was discovered in libvpx, a video codec library used by Firefox for processing VP8 and VP9 media streams.
The flaw, reported by security researcher Jayjayjazz, could be exploited when a user visits a malicious website containing specially crafted video content. Successful exploitation could result in memory corruption and potential remote code execution, giving attackers control over the user's system. The impact is considered high due to the ability of memory overflow vulnerabilities to manipulate memory boundaries and inject malicious data.
Mozilla's engineers have addressed the issue by strengthening memory checks and ensuring secure handling of video frame buffers within libvpx.
Mozilla has released Firefox version 147.0.3 to address a critical memory-related vulnerability in the browser's media processing library.
The patch is available in Firefox 147.0.4, Firefox ESR 140.7.1, and Firefox ESR 115.32.1, released on Mon, Feb 16, 2026. Users of earlier versions are advised to update immediately to enhance browser security and prevent potential exploitation.
This vulnerability fix underscores Mozilla's commitment to user safety through rapid vulnerability response and transparent disclosure. Additional details, including a proof of concept, are available in Mozilla's security advisory and Bug 2014390.
Routine browser updates are essential for minimizing exposure to zero-day and memory-corruption vulnerabilities, particularly for applications processing complex data formats like multimedia content. Users and system administrators should ensure automatic updates are enabled to receive future security patches promptly.
Based on reporting by Cyber Security News.
