CVE-2021-30547: Out of bounds write in ANGLE
An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash.
Other sources
Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 116.0.5845.180-1~deb11u1Fixed in 118.0.5993.70-1~deb11u1Fixed in 116.0.5845.180-1~deb12u1Fixed in 118.0.5993.70-1~deb12u1Fixed in 118.0.5993.70-1 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 118.0.2-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 91.12.0esr-1~deb10u1Fixed in 115.3.1esr-1~deb10u1Fixed in 102.15.0esr-1~deb11u1Fixed in 115.3.1esr-1~deb11u1Fixed in 102.15.1esr-1~deb12u1Fixed in 115.3.0esr-1~deb12u1Fixed in 115.3.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:91.12.0-1~deb10u1Fixed in 1:115.3.1-1~deb10u1Fixed in 1:102.13.1-1~deb11u1Fixed in 1:115.3.1-1~deb11u1Fixed in 1:102.15.1-1~deb12u1Fixed in 1:115.3.1-1~deb12u1Fixed in 1:115.3.1-1 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 78.12 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 78.12 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 90 - Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 91.0.4472.101 - Upgrade
Upgrade
alpine/chromiumto a version that resolves this vulnerability.Fixed in 91.0.4472.101-r0 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 90.0-r0 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 78.12.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 90.0-r0 - Upgrade
Upgrade
alpine/qt5-qtwebengineto a version that resolves this vulnerability.Fixed in 5.15.3_git20211006-r0 - Upgrade
Upgrade
alpine/qt5-qtwebengineto a version that resolves this vulnerability.Fixed in 5.15.3_git20210510-r4 - Upgrade
Upgrade
alpine/thunderbirdto a version that resolves this vulnerability.Fixed in 91.3.2-r0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-30547?
CVE-2021-30547 is classified as a high-severity vulnerability due to its potential to lead to memory corruption and crashes.
How do I fix CVE-2021-30547?
To address CVE-2021-30547, update affected software to the latest version as specified in the security advisories.
Which software is affected by CVE-2021-30547?
CVE-2021-30547 affects multiple software, including Google Chrome, Mozilla Firefox, Firefox ESR, and Thunderbird.
Can CVE-2021-30547 be exploited remotely?
Yes, CVE-2021-30547 can be exploited remotely through crafted content that triggers out of bounds memory access.
What kind of attack does CVE-2021-30547 facilitate?
CVE-2021-30547 facilitates attacks that may lead to memory corruption, which can result in application crashes and potential arbitrary code execution.