CVE-2020-6806

By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution

published March 25, 2020

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02607 · 85.3th percentile
Published
2020-03-25T21:14Z
EPSS history
Timeline
  • 25 MAR 21:14Z
    By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution
    cvelistv5