Security Advisory

CVE-2021-23997

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-24 13:25:34
Last updated 2024-08-03 19:14:10
Assigner mozilla
State PUBLISHED

Description

Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 88.