Unrated severityNVD Advisory· Published Apr 24, 2020· Updated Aug 4, 2024
CVE-2020-6821
CVE-2020-6821
Description
When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
33< 68.7+ 3 more
- (no CPE)range: < 68.7
- (no CPE)range: < 75
- (no CPE)range: unspecified
- (no CPE)range: unspecified
< 68.7.0+ 1 more
- (no CPE)range: < 68.7.0
- (no CPE)range: unspecified
- osv-coords27 versionspkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaFirefox&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%205pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%207pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP1
< 128.5.1-1.1+ 26 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 68.7.0-lp151.2.42.1
- (no CPE)range: < 92.0-1.2
- (no CPE)range: < 68.7.0-lp151.2.31.1
- (no CPE)range: < 91.1.1-1.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-3.84.2
- (no CPE)range: < 68.7.0-78.70.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-109.116.1
- (no CPE)range: < 68.7.0-3.77.1
Patches
Vulnerability mechanics
References
5- usn.ubuntu.com/4335-1/mitrevendor-advisoryx_refsource_UBUNTU
- bugzilla.mozilla.org/show_bug.cgimitrex_refsource_MISC
- www.mozilla.org/security/advisories/mfsa2020-12/mitrex_refsource_MISC
- www.mozilla.org/security/advisories/mfsa2020-13/mitrex_refsource_MISC
- www.mozilla.org/security/advisories/mfsa2020-14/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.