CVE-2021-29984 — Out-of-bounds Write in Mozilla Firefox
Severity
8.8HIGHNVD
OSV5.9
EPSS
0.4%
top 36.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 17
Latest updateMay 24
Description
Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. This led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages8 packages
🔴Vulnerability Details
4GHSA▶
GHSA-9qg9-jm6v-8f8r: Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection↗2022-05-24
CVEList▶
CVE-2021-29984: Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection↗2021-08-17
OSV▶
CVE-2021-29984: Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection↗2021-08-17
📋Vendor Advisories
8Debian▶
CVE-2021-29984: firefox - Instruction reordering resulted in a sequence of instructions that would cause a...↗2021