CVE-2021-29968 — Out-of-bounds Read in Mozilla Firefox

CWE-125 — Out-of-bounds Read5 documents5 sources
Severity
8.1HIGHNVD
EPSS
0.3%
top 47.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla FirefoxDebian Firefox
Timeline
PublishedJun 24
Latest updateMay 24

Description

When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.0.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HExploitability: 2.8 | Impact: 5.2

Affected Packages4 packages

▶CVEListV5mozilla/firefoxunspecified — 89.0.1
▶NVDmozilla/firefox< 89.0.1
▶mozillamozilla/firefox

🔴Vulnerability Details

1
GHSA
GHSA-88p3-h3gw-7xj6: When drawing text onto a canvas with WebRender disabled, an out of bounds read could occur↗2022-05-24
▶

📋Vendor Advisories

2
Debian
CVE-2021-29968: firefox - When drawing text onto a canvas with WebRender disabled, an out of bounds read c...↗2021
▶
Mozilla
Mozilla Foundation Security Advisory 2021-27: CVE-2021-29968↗
▶

💬Community

1
Bugzilla
Crash in [@ sse41::lowp::gather_8888]↗2021-05-20
▶