CVE catalog

CVE-2020-15670

Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could hav

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.07% · Oct 25, 2026

Mozilla developers reported memory safety bugs present in Firefox for Android 79. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 80, Firefox ESR < 78.2, Thunderbird < 78.2, and Firefox for Android < 80.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpefirefoxNot reported80.0fixed
Cpefirefox_esrNot reported78.2fixed
Cpefirefox_mobileNot reported80.0fixed
CpethunderbirdNot reported78.2fixed
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0+build4-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0.2+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0450.1.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0452.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0.2+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0453.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0454.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0455.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0455.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.6vulnerable
Ubuntufirefox16.0457.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0457.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0457.0.4+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0+build5-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.2+build1-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0460.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0460.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0460.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0461.0+build3-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0461.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.4vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0462.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0463.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0463.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0464.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0465.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0465.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0+build3-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0466.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.4+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.5+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.2+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.4+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0469.0+build2-0ubuntu0.16.04.4vulnerable
Ubuntufirefox16.0469.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0469.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0470.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0470.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0471.0+build5-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0472.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0472.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0473.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0474.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0474.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0475.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0476.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0476.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0477.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0478.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0478.0.2+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0479.0+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0480.0+build2-0ubuntu0.16.04.1fixed
Ubuntufirefox18.0456.0+build6-0ubuntu1vulnerable
Ubuntufirefox18.0457.0.1+build2-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox18.0460.0+build2-0ubuntu1vulnerable
Ubuntufirefox18.0460.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0460.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.3vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.4vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.5vulnerable
Ubuntufirefox18.0462.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0463.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0463.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0464.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.4+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.5+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.4+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0471.0+build5-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0475.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0477.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0479.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0480.0+build2-0ubuntu0.18.04.1fixed
Ubuntuthunderbird18.041:52.4.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird18.041:52.6.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird18.041:52.7.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird18.041:52.8.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:52.9.1+build3-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.2.1+build1-0ubuntu0.18.04.2vulnerable
Ubuntuthunderbird18.041:60.4.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.5.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.6.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.7.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.7.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.7.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.8.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:60.9.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.2.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.2.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.4.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.7.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:68.8.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntuthunderbird18.041:68.10.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntuthunderbird18.041:78.8.1+build1-0ubuntu0.18.04.1fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1fixed
Ubuntuthunderbird20.041:68.1.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.1.2+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.2.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.2.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.3.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.3.1+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.4.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.4.2+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.5.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.6.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.7.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.7.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.8.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntuthunderbird20.041:68.10.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:78.7.1+build1-0ubuntu0.20.04.1fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpefirefoxcpeNot reported80.0Not reportedNVD-CVE-2020-15670Not reported
Cpefirefox_esrcpeNot reported78.2Not reportedNVD-CVE-2020-15670Not reported
Cpefirefox_mobilecpeNot reported80.0Not reportedNVD-CVE-2020-15670Not reported
CpethunderbirdcpeNot reported78.2Not reportedNVD-CVE-2020-15670Not reported
Ubuntufirefoxdeb16.0480.0+build2-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2020-15670Not reported
Ubuntufirefoxdeb18.0480.0+build2-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-15670Not reported
Ubuntuthunderbirddeb18.041:78.8.1+build1-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-15670Not reported
Ubuntufirefoxdeb20.0480.0+build2-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-15670Not reported
Ubuntuthunderbirddeb20.041:78.7.1+build1-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-15670Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References