CVE-2020-12422 - Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer

Back Back to CVE browser

HIGH

Mozilla: Integer overflow in nsJPEGEncoder::emptyOutputBuffer

Published Jul 9, 2020

8.8

HIGH

CVSS 3.1

EPSS 1.94%

Description

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially exploitable crash. This vulnerability affects Firefox < 78.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <78

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
unspecified	affected	<78

Red Hat Enterprise Linux 7

firefox-0:78.3.0-1.el7_9

Fixed · RHSA-2020:4080
Red Hat Enterprise Linux 8

firefox-0:78.2.0-2.el8_2

Fixed · RHSA-2020:3557
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions

firefox-0:78.2.0-3.el8_0

Fixed · RHSA-2020:3555
Red Hat Enterprise Linux 8.1 Extended Update Support

firefox-0:78.2.0-3.el8_1

Fixed · RHSA-2020:3559
Red Hat Enterprise Linux 5

firefox

Out of support scope
Red Hat Enterprise Linux 6

firefox

Out of support scope

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	firefox-0:78.3.0-1.el7_9	Fixed	RHSA-2020:4080
Red Hat Enterprise Linux 8	firefox-0:78.2.0-2.el8_2	Fixed	RHSA-2020:3557
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions	firefox-0:78.2.0-3.el8_0	Fixed	RHSA-2020:3555
Red Hat Enterprise Linux 8.1 Extended Update Support	firefox-0:78.2.0-3.el8_1	Fixed	RHSA-2020:3559
Red Hat Enterprise Linux 5	firefox	Out of support scope	n/a
Red Hat Enterprise Linux 6	firefox	Out of support scope	n/a

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-190

Integer Overflow

CWE-787

Out-of-bounds Write

References (10)

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2020-12422
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1450353
x_refsource_MISCIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1872538
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2020-12422
https://security.gentoo.org/glsa/202007-10
vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-12422
https://www.mozilla.org/en-US/security/advisories/mfsa2020-24/#CVE-2020-12422
https://www.mozilla.org/security/advisories/mfsa2020-24/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2020-12422		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1450353		x_refsource_MISCIssue TrackingVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1872538		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2020-12422
https://security.gentoo.org/glsa/202007-10		vendor-advisoryx_refsource_GENTOOThird Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-12422
https://www.mozilla.org/en-US/security/advisories/mfsa2020-24/#CVE-2020-12422
https://www.mozilla.org/security/advisories/mfsa2020-24/		x_refsource_MISCVendor Advisory