Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-r31j-njtr-qycb
Vulnerability ID VCID-r31j-njtr-qycb
Aliases CVE-2020-26971
Summary Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
System Score Found at
cvssv3 8.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26971.json
epss 0.0106 https://api.first.org/data/v1/epss?cve=CVE-2020-26971
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
archlinux High https://security.archlinux.org/AVG-1315
archlinux High https://security.archlinux.org/AVG-1362
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2020-54
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2020-55
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2020-56
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26971.json
https://api.first.org/data/v1/epss?cve=CVE-2020-26971
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16042
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26971
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26973
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26974
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26978
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35111
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35113
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1908022 https://bugzilla.redhat.com/show_bug.cgi?id=1908022
ASA-202012-23 https://security.archlinux.org/ASA-202012-23
ASA-202012-25 https://security.archlinux.org/ASA-202012-25
AVG-1315 https://security.archlinux.org/AVG-1315
AVG-1362 https://security.archlinux.org/AVG-1362
GLSA-202012-20 https://security.gentoo.org/glsa/202012-20
mfsa2020-54 https://www.mozilla.org/en-US/security/advisories/mfsa2020-54
mfsa2020-55 https://www.mozilla.org/en-US/security/advisories/mfsa2020-55
mfsa2020-56 https://www.mozilla.org/en-US/security/advisories/mfsa2020-56
RHSA-2020:5561 https://access.redhat.com/errata/RHSA-2020:5561
RHSA-2020:5562 https://access.redhat.com/errata/RHSA-2020:5562
RHSA-2020:5563 https://access.redhat.com/errata/RHSA-2020:5563
RHSA-2020:5564 https://access.redhat.com/errata/RHSA-2020:5564
RHSA-2020:5565 https://access.redhat.com/errata/RHSA-2020:5565
RHSA-2020:5618 https://access.redhat.com/errata/RHSA-2020:5618
RHSA-2020:5622 https://access.redhat.com/errata/RHSA-2020:5622
RHSA-2020:5624 https://access.redhat.com/errata/RHSA-2020:5624
RHSA-2020:5644 https://access.redhat.com/errata/RHSA-2020:5644
RHSA-2020:5645 https://access.redhat.com/errata/RHSA-2020:5645
USN-4671-1 https://usn.ubuntu.com/4671-1/
USN-4701-1 https://usn.ubuntu.com/4701-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-26971.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.77935
EPSS Score 0.0106
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:26:23.611192+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2020/mfsa2020-54.yml 38.6.0