CVE-2020-6822
24.04.2020, 16:15
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>. It is possible that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.Enginsight
Vendor | Product | Version |
---|---|---|
mozilla | firefox | 𝑥 < 75.0 |
mozilla | firefox_esr | 𝑥 < 68.7.0 |
mozilla | thunderbird | 𝑥 < 68.7.0 |
𝑥
= Vulnerable software versions

Debian Releases
Debian Product | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||
firefox-esr |
| ||||||||||||
thunderbird |
|

Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||||||||||||||||
mozjs38 |
| ||||||||||||||||||||||||||
mozjs52 |
| ||||||||||||||||||||||||||
mozjs60 |
| ||||||||||||||||||||||||||
mozjs68 |
| ||||||||||||||||||||||||||
thunderbird |
|
Common Weakness Enumeration
References