Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3, allows remote attackers to execute arbitrary code via a crafted VP9 file. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4506
