UBUNTU-CVE-2021-23981

Dashboard / Vulnerabilities / UBUNTU-CVE-2021-23981

UBUNTU-CVE-2021-23981

Summary:

Details: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.

References: https://ubuntu.com/security/CVE-2021-23981, https://www.mozilla.org/en-US/security/advisories/mfsa2021-10/#CVE-2021-23981, https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23981, https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-23981, https://ubuntu.com/security/notices/USN-4893-1, https://ubuntu.com/security/notices/USN-4995-1, https://ubuntu.com/security/notices/USN-4995-2, https://www.cve.org/CVERecord?id=CVE-2021-23981