{"id":"CVE-2020-6828","aliases":["EUVD-2020-27972","GHSA-9562-p32f-jq35","SUSE-SU-2020:0971-1","SUSE-SU-2020:0978-1","SUSE-SU-2020:14339-1","openSUSE-SU-2020:0493-1"],"status":"published","title":"A malicious Android application could craft an Intent that would have been processed by Firefox...","description":"A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.\u003cbr\u003e *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR \u003c 68.7.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01508,"percentile":0.7462,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-22"],"published":"2020-04-09T11:15:51Z","modified":"2026-06-17T03:23:52Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-3.84.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-109.116.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-78.70.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"68.7.0-lp151.2.42.1"}]}],"bundled":5}],"products":[{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"firefox_esr"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2020-13/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1617928","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Permissions Required"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6828"},{"url":"https://www.mozilla.org/security/advisories/mfsa2020-13"},{"url":"https://github.com/advisories/GHSA-9562-p32f-jq35"},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200971-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1168874","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6828","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200978-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-202014339-1/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PEPV5DHEVOPH4DSX3ID2NZZTDCDCRASS/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-6828","description":"A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.\u003cbr\u003e *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR \u003c 68.7.","status":"published","published":"2020-04-24T15:48:22Z","modified":"2024-08-04T09:11:05.021Z","updated_at":"2026-11-02T14:35:52.268457Z"}],"euvd":[{"id":"EUVD-2020-27972","description":"A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.\u003cbr\u003e *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR \u003c 68.7.","status":"published","published":"2020-04-24T15:48:22Z","modified":"2024-08-04T09:11:05Z","updated_at":"2026-11-03T03:08:01.566283Z"}],"ghsa":[{"id":"GHSA-9562-p32f-jq35","title":"A malicious Android application could craft an Intent that would have been processed by Firefox...","description":"A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.\u003cbr\u003e *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR \u003c 68.7.","status":"published","published":"2022-05-24T17:16:28Z","modified":"2024-04-04T02:50:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-22","CWE-119"],"updated_at":"2026-11-02T14:56:12.154453Z"}],"nvd":[{"id":"CVE-2020-6828","description":"A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the user's profile directory. One exploitation vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to arbitrary code execution.\u003cbr\u003e *Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR \u003c 68.7.","status":"published","published":"2020-04-24T16:15:13.9Z","modified":"2026-06-17T03:23:52.883Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:05:59.718774Z"}],"osv":[{"id":"openSUSE-SU-2020:0493-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues:\n\n- CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874).\n- CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874).\n- CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874).\n- CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874).\n- CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-04-10T06:55:38Z","modified":"2026-02-04T04:16:15.667468Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"SUSE-SU-2020:0971-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues:\n\n- CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874).\n- CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874).\n- CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874).\n- CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874).\n- CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).\n","status":"published","published":"2020-04-09T11:15:51Z","modified":"2026-02-04T04:11:31.583283Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:0978-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues:\n\n- CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874).\n- CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874).\n- CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874).\n- CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874).\n- CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).\n","status":"published","published":"2020-04-09T13:21:52Z","modified":"2026-02-04T02:39:54.848923Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:14339-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues:\n\n- CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874).\n- CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874).\n- CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874).\n- CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874).\n- CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).\n","status":"published","published":"2020-04-09T12:12:29Z","modified":"2026-02-04T04:26:22.600712Z","updated_at":"2026-11-02T15:53:47.634847Z"}]}}