CVE-2020-12411: High severity Mozilla Firefox vulnerability
Last updated 24 July 2024
Other sources
Mozilla developers :Gijs (he/him), Randell Jesup reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Mozilla developers reported memory safety bugs present in Firefox 76. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 77.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 77 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 137.0.1-1 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 77.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 77.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-12411?
CVE-2020-12411 is a memory safety bug present in Firefox 76 and affects versions of Firefox up to version 77.
What are the potential impacts of CVE-2020-12411?
CVE-2020-12411 could potentially be exploited to run arbitrary code.
What is the severity of CVE-2020-12411?
CVE-2020-12411 has a severity rating of 8.8 (critical).
How do I fix CVE-2020-12411?
To fix CVE-2020-12411, you should update Firefox to version 77 (or a higher version).
Where can I find more information about CVE-2020-12411?
You can find more information about CVE-2020-12411 in the references provided: [link](https://bugzilla.mozilla.org/buglist.cgi?bug_id=1620972%2C1625333), [link](https://www.mozilla.org/en-US/security/advisories/mfsa2020-20/), [link](https://www.mozilla.org/security/advisories/mfsa2020-20/).