CVE-2021-29982 — Missing Release of Resource after Effective Lifetime in Mozilla Firefox
Severity
6.5MEDIUMNVD
OSV8.8
EPSS
0.4%
top 40.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 17
Latest updateMay 24
Description
Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of memory. This vulnerability affects Firefox < 91 and Thunderbird < 91.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6
Affected Packages9 packages
🔴Vulnerability Details
3GHSA▶
GHSA-9x2f-wq24-4m7j: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of m↗2022-05-24
OSV▶
CVE-2021-29982: Due to incorrect JIT optimization, we incorrectly interpreted data from the wrong type of object, resulting in the potential leak of a single bit of m↗2021-08-11
📋Vendor Advisories
5Debian▶
CVE-2021-29982: firefox - Due to incorrect JIT optimization, we incorrectly interpreted data from the wron...↗2021