CVE-2021-29980

Summary

Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.

Affected Software

VendorProductVersion RangeStatus
MozillaThunderbirdunspecified < 78.13affected
MozillaThunderbirdunspecified < 91affected
MozillaFirefox ESRunspecified < 78.13affected
MozillaFirefoxunspecified < 91affected

Weaknesses

  • Uninitialized memory in a canvas object could have led to memory corruption

ADP Enrichment

CVE Program Container

Additional References

References