CVE-2020-12407: Medium severity Mozilla Firefox vulnerability
Last updated 24 July 2024
Other sources
Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observable from web content.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 77 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 137.0.1-1 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 77.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 77.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2020-12407.
Which software is affected by this vulnerability?
Firefox versions up to exclusive 77 are affected.
What is the severity level of CVE-2020-12407?
The severity level of CVE-2020-12407 is medium with a CVSS score of 6.5.
How can I fix the vulnerability in Firefox?
To fix the vulnerability in Firefox, update to version 77.0.1 or newer.
Where can I find more information about CVE-2020-12407?
More information about CVE-2020-12407 can be found in the Mozilla Security Advisory MFSA2020-20.