Bug 734980 (CVE-2020-15652, CVE-2020-6463)

Summary:	[Tracker] Multiple vulnerabilities in Mozilla products (CVE-2020-15652, CVE-2020-6463)
Product:	Gentoo Security	Reporter:	Sam James <sam>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	mozilla
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	734324, 734978
Bug Blocks:

Description Sam James archtester

2020-07-31 17:22:38 UTC

* CVE-2020-15652

Description:
"By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script."

* CVE-2020-6463

Description:
"Crafted media files could lead to a race in texture caches, resulting in a use-after-free, memory corruption, and a potentially exploitable crash."