Remote Yes

Type Arbitrary code execution

Description

A use-after-free has been found in Firefox before 82.0.3 where, in certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions.

AVG-1265 firefox 82.0.2-1 82.0.3-1 Critical Fixed

10 Nov 2020 ASA-202011-6 AVG-1265 firefox Critical arbitrary code execution

https://www.mozilla.org/en-US/security/advisories/mfsa2020-49/#CVE-2020-26950
https://bugzilla.mozilla.org/show_bug.cgi?id=1675905