VDB
GCVE-VVD-MAGEIA-2020-142
GCVE-VVD-MAGEIA-2020-142
Advisory Published
The updated packages fix a security vulnerabilities:
Out of bounds reads in sctp_load_addresses_from_init. (CVE-2019-20503)
Use-after-free when removing data about origins. (CVE-2020-6805)
BodyStream::OnInputStreamReady was missing protections against state
confusion. (CVE-2020-6806)
Use-after-free in cubeb during stream destruction. (CVE-2020-6807)
Devtools' 'Copy as cURL' feature did not fully escape website-controlled
data, potentially leading to command injection. (CVE-2020-6811)
The names of AirPods with personally identifiable information were exposed
to websites with camera or microphone permission. (CVE-2020-6812)
Memory safety bugs fixed in Thunderbird 68.6. (CVE-2020-6814)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | thunderbird-l10n | 0 (affected), 68.6.0-1.mga7 (unaffected), 0 (affected), 68.6.0-1.mga7 (unaffected) | — |
| Mageia | thunderbird | 0 (affected), 68.6.0-1.mga7 (unaffected), 0 (affected), 68.6.0-1.mga7 (unaffected) | — |
| Mageia | jbig2dec | 0 (affected), 0.18-1.1.mga7 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.