CVE-2021-23975: Medium severity Mozilla Firefox vulnerability
The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof function, instead of using the API method that checks for invalid pointers.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 86 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 87.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 87.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-23975?
CVE-2021-23975 has a medium severity level that could lead to potential information disclosure.
How do I fix CVE-2021-23975?
To fix CVE-2021-23975, upgrade to Mozilla Firefox version 86.0 or later.
Which software is affected by CVE-2021-23975?
CVE-2021-23975 affects Mozilla Firefox versions up to and including 86.0.
What impact does CVE-2021-23975 have on users?
CVE-2021-23975 could allow attackers to exploit memory management issues, potentially leading to crashes or information leaks.
Is CVE-2021-23975 related to memory management issues?
Yes, CVE-2021-23975 originates from improper memory allocation checks in the Firefox developer tool.