CVE-2021-23960Null Byte Interaction Error (Poison Null Byte) in Mozilla Firefox

Severity
8.8HIGHNVD
EPSS
0.3%
top 46.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 26
Latest updateMay 24

Description

Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages7 packages

CVEListV5mozilla/firefox< 85
NVDmozilla/firefox< 85.0
CVEListV5mozilla/firefox_esr< 78.7
CVEListV5mozilla/thunderbird< 78.7

🔴Vulnerability Details

3
GHSA
GHSA-qvw3-rf6g-2w3x: Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash2022-05-24
OSV
CVE-2021-23960: Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash2021-02-26
CVEList
CVE-2021-23960: Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash2021-02-26

📋Vendor Advisories

7
Ubuntu
Thunderbird vulnerabilities2021-02-16
Ubuntu
Firefox vulnerabilities2021-02-01
Red Hat
Mozilla: Use-after-poison for incorrectly redeclared JavaScript variables during GC2021-01-26
Debian
CVE-2021-23960: firefox - Performing garbage collection on re-declared JavaScript variables resulted in a ...2021
Mozilla
Mozilla Foundation Security Advisory 2021-05: CVE-2021-23960
CVE-2021-23960 — Mozilla Firefox vulnerability | cvebase