CVE-2020-6792

Mozilla: Message ID calculation was based on uninitialized data

Loading…

Severity

Low

Red Hat Product Security

4.3

CVSS 3.1

Review impact separately from score.

Published · February 11, 2020

Updated · November 22, 2025

Description

When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird < 68.5.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CWE-456 · Missing Initialization of a Variable