CVE-2021-38498: Use After Free

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1729642
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-47/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-43/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-45/
• https://www.mozilla.org/security/advisories/mfsa2021-43/
• https://www.mozilla.org/security/advisories/mfsa2021-45/
• https://www.mozilla.org/security/advisories/mfsa2021-47/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2021-47
• MFSA2021-45
• MFSA2021-43

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-38502
• CVE-2021-38496
• CVE-2021-38497
• CVE-2021-38498
• CVE-2021-32810
• CVE-2021-38500
• CVE-2021-38501
• CVE-2021-43535
• CVE-2021-38499

Frequently Asked Questions

• What is CVE-2021-38498?

  CVE-2021-38498 is a vulnerability in Mozilla Thunderbird and Firefox that can cause a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash.

• How severe is CVE-2021-38498?

  CVE-2021-38498 has a severity rating of medium.

• Which software versions are affected by CVE-2021-38498?

  CVE-2021-38498 affects Mozilla Thunderbird up to version 91.2, Firefox ESR up to version 91.2, and Firefox up to version 93.

• How can I fix CVE-2021-38498?

  To fix CVE-2021-38498, update Mozilla Thunderbird to version 91.2, Firefox ESR to version 91.2, or Firefox to version 93.

• Where can I find more information about CVE-2021-38498?

  You can find more information about CVE-2021-38498 in the following references: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1729642), [Mozilla Security Advisory MFSAs](https://www.mozilla.org/en-US/security/advisories/mfsa2021-47/), [Mozilla Security Advisory MFSA2021-43](https://www.mozilla.org/en-US/security/advisories/mfsa2021-43/).