← back
CVE-2021-23981

CVE-2021-23981

EPSS 1.1%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
31 Mar 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
Affected products
Mozilla · FirefoxMozilla · Firefox ESRMozilla · Thunderbird

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugzilla.mozilla.org/show_bug.cgi?id=1692832https://www.mozilla.org/security/advisories/mfsa2021-10/https://www.mozilla.org/security/advisories/mfsa2021-11/https://www.mozilla.org/security/advisories/mfsa2021-12/