HIGH
Mozilla developers reported memory safety bugs present in Firefox 71
Published Jan 8, 2020
8.8
HIGHCVSS 3.1
EPSS 1.26%
Description
Mozilla developers reported memory safety bugs present in Firefox 71. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 72.
Affected products
-
- Version before 72StatusaffectedConstraints-
- Version
Configuration 2
OR
- 16.04
- 18.04
- 19.04
- 19.10
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1328295%2C1328300%2C1590447%2C1590965%2C1595692%2C1597321%2C1597481 x_refsource_MISCBroken Link
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7499 Advisory
- https://usn.ubuntu.com/4234-1/ vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- https://www.mozilla.org/security/advisories/mfsa2020-01/ x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://bugzilla.mozilla.org/buglist.cgi?bug_id=1328295%2C1328300%2C1590447%2C1590965%2C1595692%2C1597321%2C1597481 | x_refsource_MISCBroken Link | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7499 | Advisory | |
| https://usn.ubuntu.com/4234-1/ | vendor-advisoryx_refsource_UBUNTUThird Party Advisory | |
| https://www.mozilla.org/security/advisories/mfsa2020-01/ | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mozilla
Published Jan 8, 2020
Updated Aug 5, 2024
Reserved Sep 30, 2019
Link CVE-2019-17025
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2019-7499 Assigner mozilla
Published Jan 8, 2020
Updated Aug 5, 2024
Exploited since n/a
Link EUVD-2019-7499