CVE-2020-6815: 
NixOS vulnerability analysis and mitigation

CVE-2020-6815 is a high-severity vulnerability discovered in Firefox 73, disclosed on March 10, 2020. Mozilla developers Jason Kratzer, Boris Zbarsky, Tyson Smith, and Alexandru Michis reported memory safety and script safety bugs that showed evidence of memory corruption or escalation of privilege. The vulnerability affects Firefox versions prior to 74 (Mozilla Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 9.8 (CRITICAL) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The issue is classified under CWE-787 (Out-of-bounds Write). With sufficient effort, these memory corruption and privilege escalation issues could potentially be exploited to execute arbitrary code (NVD).

The vulnerability could allow attackers to potentially execute arbitrary code on affected systems. The high CVSS score indicates that successful exploitation could lead to complete compromise of system confidentiality, integrity, and availability (NVD, Mozilla Advisory).

While the vulnerability showed evidence of memory corruption and privilege escalation capabilities, there were no reports of active exploitation in the wild at the time of disclosure. However, security researchers noted that the average time to weaponization for such vulnerabilities is approximately 7 days (Threatpost).

The vulnerability was patched in Firefox 74. Users are advised to update their Firefox installations to version 74 or later to protect against this security issue (Mozilla Advisory).