CVE-2021-38501

Reference Links

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1685354%2C1715755%2C1723176
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-47/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-43/
• https://www.mozilla.org/en-US/security/advisories/mfsa2021-45/
• https://www.mozilla.org/security/advisories/mfsa2021-43/
• https://www.mozilla.org/security/advisories/mfsa2021-45/
• https://www.mozilla.org/security/advisories/mfsa2021-47/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2021-47
• MFSA2021-45
• MFSA2021-43

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-38502
• CVE-2021-38496
• CVE-2021-38497
• CVE-2021-38498
• CVE-2021-32810
• CVE-2021-38500
• CVE-2021-38501
• CVE-2021-43535
• CVE-2021-38499

Frequently Asked Questions

• What is the severity of CVE-2021-38501?

  The severity of CVE-2021-38501 is high with a severity value of 8.8.

• Which software versions are affected by CVE-2021-38501?

  CVE-2021-38501 affects Firefox versions prior to 93, Thunderbird versions prior to 91.2, and Firefox ESR versions prior to 91.2.

• How can CVE-2021-38501 be exploited?

  CVE-2021-38501 can be exploited by running arbitrary code after exploiting memory corruption bugs in Firefox 92 and Firefox ESR 91.1.

• Is there a fix available for CVE-2021-38501?

  Yes, the fix for CVE-2021-38501 is available in Firefox version 93, Thunderbird version 91.2, and Firefox ESR version 91.2.

• Where can I find more information about CVE-2021-38501?

  You can find more information about CVE-2021-38501 on the Mozilla Security Advisories page at the following links: [https://www.mozilla.org/en-US/security/advisories/mfsa2021-47/](https://www.mozilla.org/en-US/security/advisories/mfsa2021-47/) and [https://www.mozilla.org/security/advisories/mfsa2021-43/](https://www.mozilla.org/security/advisories/mfsa2021-43/).