CVE-2019-9821 — Race Condition in Mozilla Firefox

CWE-362 — Race ConditionCWE-416 — Use After Free13 documents7 sources
Severity
8.1HIGHNVD
OSV9.8
EPSS
0.4%
top 37.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla FirefoxDebian Firefox
Timeline
PublishedJul 23
Latest updateMay 24

Description

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox < 67.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9

Affected Packages4 packages

▶debiandebian/firefox< firefox 67.0-2 (sid)
▶CVEListV5mozilla/firefoxunspecified — 67
▶NVDmozilla/firefox< 67.0
▶Ubuntumozilla/firefox< 67.0+build2-0ubuntu0.16.04.1+5

🔴Vulnerability Details

5
GHSA
GHSA-f9x2-983g-532w: A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers↗2022-05-24
▶
OSV
firefox regression↗2019-06-14
▶
OSV
firefox regression↗2019-06-06
▶
OSV
firefox vulnerabilities↗2019-05-21
▶
OSV
CVE-2019-9821: A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers↗2019-05-21
▶

📋Vendor Advisories

5
Ubuntu
Firefox regression↗2019-06-14
▶
Ubuntu
Firefox regression↗2019-06-06
▶
Ubuntu
Firefox vulnerabilities↗2019-05-21
▶
Red Hat
firefox: use-after-free in AssertWorkerThread leading to crash↗2019-05-21
▶
Debian
CVE-2019-9821: firefox - A use-after-free vulnerability can occur in AssertWorkerThread due to a race con...↗2019
▶

💬Community

2
Bugzilla
CVE-2019-9821 firefox: use-after-free in AssertWorkerThread leading to crash [fedora-all]↗2019-05-22
▶
Bugzilla
CVE-2019-9821 firefox: use-after-free in AssertWorkerThread leading to crash↗2019-05-22
▶