CVE-2020-15681

HIGH

Firefox < 82.0 - Use-After-Free in WASM Thread Shared Stub Table

Title source: llm

Description

When multiple WASM threads had a reference to a module, and were looking up exported functions, one WASM thread could have overwritten another's entry in a shared stub table, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 82.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory x_refsource_misc

https://www.mozilla.org/security/advisories/mfsa2020-45/

Issue Tracking, Permissions Required, Vendor Advisory x_refsource_misc

https://bugzilla.mozilla.org/show_bug.cgi?id=1666568

Scores

CVSS v3 7.5

EPSS 0.0043

EPSS Percentile 63.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (1)

mozilla/firefox < 82.0

Published Oct 22, 2020

Tracked Since Feb 18, 2026