← Database

CVE-2021-43537

HIGH CVSS: 8.8 Published: 2021-12-08 Modified: 2026-06-17

Description

An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

Affected Platforms

Mozilla FirefoxDebian Debian LinuxMozilla ThunderbirdMozilla Firefox Esr

Weakness Type

CWE-704

References