CVE-2021-43539: Use After Free
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-43539?
CVE-2021-43539 has a high severity rating due to its potential to cause a use-after-free vulnerability.
How do I fix CVE-2021-43539?
To fix CVE-2021-43539, update Mozilla Thunderbird to version 91.4 or later, and update Firefox and Firefox ESR to the respective fixed versions.
Which software versions are affected by CVE-2021-43539?
CVE-2021-43539 affects Mozilla Thunderbird versions prior to 91.4, Firefox versions before 95, and Firefox ESR versions prior to 91.4.
Can CVE-2021-43539 lead to system crashes?
Yes, CVE-2021-43539 can lead to crashes due to potential use-after-free errors.
What happens if I don't address CVE-2021-43539?
If CVE-2021-43539 is not addressed, it could allow attackers to exploit the vulnerability, potentially leading to crashes and unauthorized access.