CVE-2020-12425

Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure

published July 9, 2020

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. This vulnerability affects Firefox < 78.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01573 · 75.2th percentile
Published
2020-07-09T14:39Z
EPSS history
Timeline
  • 09 JUL 14:39Z
    Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure
    cvelistv5