CVE-2020-6801: 
NixOS vulnerability analysis and mitigation

Mozilla developers reported memory safety bugs present in Firefox 72 that showed evidence of memory corruption. These bugs could potentially be exploited to run arbitrary code if sufficient effort was applied. The vulnerability (CVE-2020-6801) affects Firefox versions prior to 73 (Mozilla Advisory, NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-787 (Out-of-bounds Write), indicating a memory corruption issue that could lead to arbitrary code execution (NVD).

If successfully exploited, this vulnerability could allow attackers to cause memory corruption and potentially execute arbitrary code on affected systems. The high CVSS score indicates significant potential impact on the confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability was fixed in Firefox version 73. Users should upgrade to Firefox 73 or later to mitigate this security issue. Ubuntu has also released security updates for affected versions: Firefox 73.0+build3-0ubuntu0.19.10.1 for Ubuntu 19.10, 73.0+build3-0ubuntu0.18.04.1 for Ubuntu 18.04 LTS, and 73.0.1+build1-0ubuntu0.16.04.1 for Ubuntu 16.04 LTS (Ubuntu Advisory).