CVE-2021-23977: Medium severity Mozilla Firefox vulnerability
Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86.
Other sources
Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories.Note: This issue is only affected Firefox for Android. Other operating systems are unaffected.
— Mozilla
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 86 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 87.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 87.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-23977?
CVE-2021-23977 has been classified as a high severity vulnerability due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2021-23977?
To fix CVE-2021-23977, update Firefox for Android to version 86 or later.
Who is affected by CVE-2021-23977?
Only users of Firefox for Android versions prior to 86 are affected by CVE-2021-23977.
What type of vulnerability is CVE-2021-23977?
CVE-2021-23977 is a time-of-check-time-of-use vulnerability that can lead to unauthorized data access.
Does CVE-2021-23977 affect other operating systems?
No, CVE-2021-23977 only affects Firefox for Android and does not impact other operating systems.