diff --git a/multimedia/libvpx/Makefile b/multimedia/libvpx/Makefile
index 9ed45565cb05..3707de8d6825 100644
--- a/multimedia/libvpx/Makefile
+++ b/multimedia/libvpx/Makefile
@@ -1,53 +1,57 @@
 PORTNAME=	libvpx
 DISTVERSIONPREFIX=	v
 DISTVERSION=	1.15.0
+PORTREVISION=	1
 CATEGORIES=	multimedia
 
+PATCH_SITES=	https://github.com/${GH_ACCOUNT}/${GH_PROJECT}/commit/
+PATCHFILES+=	865eaf63a727.patch:-p1 # CVE-2025-5283
+
 MAINTAINER=	jbeich@FreeBSD.org
 COMMENT=	VP8/VP9 reference encoder/decoder
 WWW=		https://www.webmproject.org/
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BUILD_DEPENDS=	${BUILD_DEPENDS_${ARCH}}
 BUILD_DEPENDS_amd64=	nasm:devel/nasm
 BUILD_DEPENDS_armv6=	as:devel/binutils
 BUILD_DEPENDS_armv7=	as:devel/binutils
 BUILD_DEPENDS_i386=	nasm:devel/nasm
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	webmproject
 
 USES=		compiler:c++11-lib cpe gmake perl5 shebangfix
 CPE_VENDOR=	webmproject
 HAS_CONFIGURE=	yes
 USE_PERL5=	build
 USE_LDCONFIG=	yes
 SHEBANG_FILES=	build/make/ads2gas.pl
 CONFIGURE_ARGS=	--prefix=${PREFIX} \
 		--disable-install-docs \
 		--disable-install-srcs \
 		--disable-unit-tests \
 		--enable-multi-res-encoding \
 		--enable-pic \
 		--enable-shared \
 		--enable-vp9-highbitdepth \
 		--enable-vp9-postproc \
 		--enable-vp9-temporal-denoising \
 		--size-limit=16384x16384
 MAKE_ARGS+=	verbose=yes
 ALL_TARGET=	# empty
 
 post-patch:
 	@${REINPLACE_CMD} -E '/gcctarget|link_with_cc/s/gcc[[:>:]]/$${CC}/' \
 		${WRKSRC}/build/make/configure.sh
 # Extract (snapshot) version from the port instead of CHANGELOG
 	@${REINPLACE_CMD} '/^git_version_id/s/""/"${DISTVERSIONFULL}"/' \
 		${WRKSRC}/build/make/version.sh
 
 post-install:
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/vpx*
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/libvpx.so.*.*.*
 
 .include <bsd.port.mk>
diff --git a/multimedia/libvpx/distinfo b/multimedia/libvpx/distinfo
index 34d1e4202184..9cae7404eaab 100644
--- a/multimedia/libvpx/distinfo
+++ b/multimedia/libvpx/distinfo
@@ -1,3 +1,5 @@
 TIMESTAMP = 1729707897
 SHA256 (webmproject-libvpx-v1.15.0_GH0.tar.gz) = e935eded7d81631a538bfae703fd1e293aad1c7fd3407ba00440c95105d2011e
 SIZE (webmproject-libvpx-v1.15.0_GH0.tar.gz) = 5629622
+SHA256 (865eaf63a727.patch) = 764775e10883bf5b8a0dc467cd20176853ef23b53a9757c65e85bcca7633d509
+SIZE (865eaf63a727.patch) = 2493