CVE-2020-12425: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential information disclosure. This vulnerability affects Firefox < 78.

Affected products

• Mozilla Firefox: before 78.0 (fixed in 78.0)

Published 2020-07-09. Last modified 2026-06-17.