CVE-2021-29968
published 2021-06-24CVE-2021-29968: When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. Other operating systems…
PriorityP335high8.1CVSS 3.1
AVNACLPRNUIRSUCHINAH
EPSS
0.83%
53.8th percentile
When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.0.1.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 89.0.1 | 89.0.1 |
| mozilla | firefox | — | — |
| mozilla | firefox | >= unspecified < 89.0.1 | 89.0.1 |
CVSS provenance
nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
vendor_debian8.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2021-29968: firefox - When drawing text onto a canvas with WebRender disabled, an out of bounds read c...
vendor_debian·2021·CVSS 8.1
CVE-2021-29968 [HIGH] CVE-2021-29968: firefox - When drawing text onto a canvas with WebRender disabled, an out of bounds read c...
When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.0.1.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2021-27: CVE-2021-29968
vendor_mozilla·CVSS 8.1
CVE-2021-29968 [HIGH] Mozilla Foundation Security Advisory 2021-27: CVE-2021-29968
Mozilla Foundation Security Advisory 2021-27
CVE: CVE-2021-29968
Product: Firefox
Impact: moderate
Fixed in: Firefox 89.0.1
GHSA
GHSA-88p3-h3gw-7xj6: When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur
ghsa_unreviewed·2022-05-24
CVE-2021-29968 [HIGH] CWE-125 GHSA-88p3-h3gw-7xj6: When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur
When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.0.1.
No detection rules found.
No public exploits indexed.
2021-06-24
Published