CVE-2020-6821

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the…

published April 24, 2020

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01505 · 74.2th percentile
Published
2020-04-24T15:55Z
EPSS history
Timeline
  • 24 APR 15:55Z
    When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the…
    cvelistv5