CVE-2020-12422: Integer Overflow
In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 78 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 78 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 137.0.2-1 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 78.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 78.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-12422?
CVE-2020-12422 is a vulnerability that occurs when a JPEG image created by JavaScript can cause an internal variable to overflow, resulting in memory corruption and potentially exploitable crashes.
Which software is affected by CVE-2020-12422?
Mozilla Firefox and Mozilla Thunderbird versions up to and excluding 78 are affected by CVE-2020-12422.
What is the severity of CVE-2020-12422?
CVE-2020-12422 has a severity level of medium (4).
How can I fix CVE-2020-12422?
To fix CVE-2020-12422, update Mozilla Firefox and Mozilla Thunderbird to version 78 or above.
Where can I find more information about CVE-2020-12422?
You can find more information about CVE-2020-12422 on the Mozilla Bugzilla website and the Mozilla Security Advisories page.