CVE-2020-15681: High severity Mozilla Firefox vulnerability
When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 82 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 82.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 82.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2020-15681?
CVE-2020-15681 is a vulnerability that allows one WASM thread to overwrite another's entry in a shared stub table in Mozilla Firefox, potentially leading to a crash.
What is the severity of CVE-2020-15681?
CVE-2020-15681 has a severity level of medium (4) in Mozilla Firefox.
How does the CVE-2020-15681 vulnerability occur?
The CVE-2020-15681 vulnerability occurs when multiple WASM threads have a reference to a module and are looking up exported functions, causing one WASM thread to overwrite another's entry in a shared stub table.
Which software is affected by CVE-2020-15681?
Mozilla Firefox version up to exclusive 82 is affected by CVE-2020-15681.
How can I fix CVE-2020-15681?
To fix CVE-2020-15681, update your Mozilla Firefox to version 82 or later.