PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2020-26960

CVE-2020-26960

Mozilla: Potential use-after-free in uses of nsTArray

Loading…

Severity

Moderate

Red Hat Product Security

8.8

CVSS 3.1

Review impact separately from score.

Published · November 17, 2020

Updated · November 22, 2025

Description

If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 · Use After Free