CVE-2020-12407

Summary

Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observable from web content. This vulnerability affects Firefox < 77.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 77affected

Weaknesses

  • WebRender leaking GPU memory when using border-image CSS directive

ADP Enrichment

CVE Program Container

Additional References

References