CVE-2020-16048

Mozilla: Buffer overflow in depth pitch calculations for compressed textures

Loading…

Severity

Critical

Red Hat Product Security

8.8

CVSS 3.0

Review impact separately from score.

Published · February 5, 2021

Updated · November 22, 2025

Description

Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page.

Statement

This vulnerability only affected Firefox on the Windows operating system. Firefox on Red Hat Enterprise Linux is not affected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')