CVE-2021-23954: High severity thunderbird vulnerability
Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-23954?
CVE-2021-23954 is classified as a high severity vulnerability due to potential memory corruption and crash exploitation.
How do I fix CVE-2021-23954?
To fix CVE-2021-23954, update your software to Mozilla Thunderbird version 78.7 or higher, Mozilla Firefox version 85 or higher, or Mozilla Firefox ESR version 78.7 or higher.
What software is affected by CVE-2021-23954?
CVE-2021-23954 affects Mozilla Thunderbird versions up to 78.7, Mozilla Firefox versions up to 85, and Mozilla Firefox ESR versions up to 78.7.
What type of vulnerability is CVE-2021-23954?
CVE-2021-23954 is a type confusion vulnerability that could result in memory corruption.
What can happen if I don't address CVE-2021-23954?
If CVE-2021-23954 is not addressed, it may lead to crashes or potential exploitation of the affected software.