CVE-2019-11760

—

CVSS 3.1

8.8 high

EPSS

1%p70

Published

Jan 8, 2020 (Jan 8, 2020)

Modified

Jun 17, 2026

Description

A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This resulted in a potentially exploitable crash in some instances. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.

Vendors: mozilla canonical
Products: firefox, firefox esr, thunderbird, ubuntu linux
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.