CVE-2020-6826

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 75.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
Mozilla	Firefox	>= unspecified, < 75

References

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1613009%2C1613195%2C1616734%2C1617488%2C1619229%2C1620719%2C1624897Issue Tracking, Permissions Required
https://www.mozilla.org/security/advisories/mfsa2020-12/Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1613009%2C1613195%2C1616734%2C1617488%2C1619229%2C1620719%2C1624897Issue Tracking, Permissions Required
https://www.mozilla.org/security/advisories/mfsa2020-12/Vendor Advisory

Timeline

Published: Apr 24, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-68274.7When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into dis CVE-2020-68287.5A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file CVE-2020-68295.3When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the CVE-2020-68307.5For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That to CVE-2020-68319.8A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially CVE-2020-68325.3An issue was discovered in GitLab Enterprise Edition (EE) 8.9.0 through 12.6.1. Using the project import feature, it was possible for someon CVE-2020-68337.5An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggli CVE-2020-68359.8An issue was discovered in Bftpd before 5.4. There is a heap-based off-by-one error during file-transfer error checking.CVE-2020-68369.8grammar-parser.jison in the hot-formula-parser package before 3.0.1 for Node.js is vulnerable to arbitrary code injection. The package fails CVE-2020-68389.8In mruby 2.1.0, there is a use-after-free in hash_values_at in mrbgems/mruby-hash-ext/src/hash-ext.c.CVE-2020-68399.8In mruby 2.1.0, there is a stack-based buffer overflow in mrb_str_len_to_dbl in string.c.CVE-2020-68409.8In mruby 2.1.0, there is a use-after-free in hash_slice in mrbgems/mruby-hash-ext/src/hash-ext.c.