CVE-2020-12417

PoC —

CVSS 3.1

8.8 high

EPSS

3%p85

Published

Jul 9, 2020 (Jul 9, 2020)

Modified

Jun 17, 2026

Description

Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox on ARM64 platforms.* This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.

Vendors: mozilla canonical opensuse
Products: firefox, firefox esr, thunderbird, ubuntu linux, leap
Weakness: CWE-617, CWE-681, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.