CVE-2021-23981 - log back

CVE-2021-23981 edited at 23 Mar 2021 14:05:30
Description
- A security issue was found in Firefox before version 87. A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash.
+ A security issue was found in Firefox before version 87 and Thunderbird before version 78.9. A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash.
References
https://www.mozilla.org/en-US/security/advisories/mfsa2021-10/#CVE-2021-23981
+ https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-23981
https://bugzilla.mozilla.org/show_bug.cgi?id=1692832
CVE-2021-23981 edited at 23 Mar 2021 13:55:25
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Arbitrary code execution
Description
+ A security issue was found in Firefox before version 87. A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash.
References
+ https://www.mozilla.org/en-US/security/advisories/mfsa2021-10/#CVE-2021-23981
+ https://bugzilla.mozilla.org/show_bug.cgi?id=1692832
Notes
CVE-2021-23981 created at 23 Mar 2021 13:53:51