PT-2020-4294

CVE-2020-15674

Published

2020-09-22

Updated

2026-10-31

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 81

Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. It is associated with memory safety bugs that showed evidence of memory corruption.

Recommendations: For versions prior to 81, update to version 81 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive resources until the update is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Byron Campen

Christian Holler

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer