| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 95.0 | 95.0 |
| firefox esr | < 91.4.0 | 91.4.0 |
| thunderbird | < 91.4.0 | 91.4.0 |
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free