CVE-2020-15678

When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free

published October 1, 2020

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free. This occurs because the function APZCTreeManager::ComputeClippedCompositionBounds did not follow iterator invalidation rules. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01882 · 79.3th percentile
Published
2020-10-01T18:29Z
EPSS history
Timeline
  • 01 OCT 18:29Z
    When recursing through graphical layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free
    cvelistv5