CVE-2021-38501 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	High
Remote	Yes
Type	Arbitrary code execution
Description	Mozilla developers and community members reported memory safety bugs present in Firefox 92 and Thunderbird 91.1. Some of these bugs showed evidence of memory corruption and Mozilla presumes that with enough effort some of these could have been exploited to run arbitrary code.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-2459	thunderbird	91.1.2-1	91.2.0-1	High	Fixed
AVG-2443	firefox	92.0.1-1	93.0-1	High	Fixed

References
https://www.mozilla.org/security/advisories/mfsa2021-43/ https://www.mozilla.org/security/advisories/mfsa2021-47/ https://bugzilla.mozilla.org/buglist.cgi?bug_id=1685354%2C1715755%2C1723176