CVE-2020-6807

When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been executed after the stream was destroyed…

published March 25, 2020

CVSS
—
EPSS
1%
Percentile
73.6
In the wild
Unconfirmed
What it is

When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01474 · 73.6th percentile
Published
2020-03-25T21:13Z
EPSS history
Timeline
  • 25 MAR 21:13Z
    When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been executed after the stream was destroyed…
    cvelistv5