CVE-2020-6831

A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.

• CWE-787

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00000.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/158480/usrsctp-Stack-Buffer-Overflow.htmlThird Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1632241Permissions Required
• https://security.gentoo.org/glsa/202005-03Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202005-04Third Party Advisory
• https://usn.ubuntu.com/4373-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4714Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-16/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-17/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-18/Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00000.htmlMailing List, Third Party Advisory
• http://packetstormsecurity.com/files/158480/usrsctp-Stack-Buffer-Overflow.htmlThird Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1632241Permissions Required
• https://security.gentoo.org/glsa/202005-03Patch, Third Party Advisory
• https://security.gentoo.org/glsa/202005-04Third Party Advisory
• https://usn.ubuntu.com/4373-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4714Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-16/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-17/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-18/Vendor Advisory

Published

May 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6825Mozilla developers and community members Tyson Smith and Chr…9.8
• CVE-2020-6826Mozilla developers Tyson Smith, Bob Clary, and Alexandru Mic…9.8
• CVE-2020-6827When following a link that opened an intent://-schemed URL, …4.7
• CVE-2020-6828A malicious Android application could craft an Intent that w…7.5
• CVE-2020-6829When performing EC scalar point multiplication, the wNAF poi…5.3
• CVE-2020-6830For native-to-JS bridging, the app requires a unique token t…7.5
• CVE-2020-6832An issue was discovered in GitLab Enterprise Edition (EE) 8.…5.3
• CVE-2020-6833An issue was discovered in GitLab EE 11.3 and later. A GitLa…7.5
• CVE-2020-6835An issue was discovered in Bftpd before 5.4. There is a heap…9.8
• CVE-2020-6836grammar-parser.jison in the hot-formula-parser package befor…9.8
• CVE-2020-6838In mruby 2.1.0, there is a use-after-free in hash_values_at …9.8
• CVE-2020-6839In mruby 2.1.0, there is a stack-based buffer overflow in mr…9.8