CVE-2021-29952: Race Condition
When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume that with enough effort may have been exploitable to run arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 88.0.1 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 88.0.1-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 88.0.1-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29952?
CVE-2021-29952 has a high severity rating due to the potential for arbitrary code execution via a race condition.
How do I fix CVE-2021-29952?
To fix CVE-2021-29952, update Mozilla Firefox to version 88.0.1 or later.
What versions of Firefox are affected by CVE-2021-29952?
CVE-2021-29952 affects Mozilla Firefox versions prior to 88.0.1 on desktop and 88.1.3 on Android.
Can CVE-2021-29952 be exploited remotely?
Yes, CVE-2021-29952 could potentially be exploited remotely under certain conditions.
What components are involved in CVE-2021-29952?
CVE-2021-29952 involves the Web Render components of Mozilla Firefox.