CVE-2021-23981
Assigner: mozilla
Published: 2021-03-31T13:42:17
State: PUBLISHED
affected: product: Firefox ESR
vendor: Mozilla
versions: lessThan: 78.9
status: affected
version: unspecified
versionType: custom
product: Firefox
vendor: Mozilla
versions: lessThan: 87
status: affected
version: unspecified
versionType: custom
product: Thunderbird
vendor: Mozilla
versions: lessThan: 78.9
status: affected
version: unspecified
versionType: custom
descriptions: value: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
problemTypes: descriptions: description: Texture upload into an unbound backing buffer resulted in an out-of-bound read
type: text