CVE-2021-23970: Medium severity Mozilla Firefox vulnerability
Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 86 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 87.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 87.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-23970?
CVE-2021-23970 is classified as a high severity vulnerability affecting multithreaded WebAssembly code execution in Firefox versions prior to 86.
How do I fix CVE-2021-23970?
To fix CVE-2021-23970, you should update your Mozilla Firefox or Thunderbird to version 86 or later.
What versions of Firefox are affected by CVE-2021-23970?
CVE-2021-23970 affects all versions of Firefox prior to version 86.
What type of vulnerability is CVE-2021-23970?
CVE-2021-23970 is a context-specific code vulnerability that can trigger assertions in multithreaded WebAssembly code.
Is CVE-2021-23970 a critical vulnerability?
CVE-2021-23970 is not classified as critical, but it poses significant risks in terms of multithreaded application reliability.