PT-2021-9851 · Mozilla+1 · Firefox+1

Published 2021-02-05 · Updated 2021-11-04 · CVE-2020-16048

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ANGLE (affected versions not specified) Mozilla Firefox (affected versions not specified)

Description The issue allows a remote attacker to obtain sensitive data via a crafted HTML page, exploiting an out of bounds read in ANGLE. This can be achieved by using a specifically crafted HTML page to trigger the out of bounds read, potentially leading to information disclosure.

Recommendations For ANGLE, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Mozilla Firefox, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-16048

ZDI-21-216

Affected Products

Angle

Firefox

References · 7

• https://mozilla.org/en-US/security/advisories/mfsa2021-06 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-216 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16048 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-16048 · Security Note
• https://t.me/cibsecurity/31676 · Telegram Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=1676636 · Note
• https://crbug.com/1174641 · Note