VULNERABILITY INTELLIGENCE

CVE-2021-29980

CVSS score8.8 HIGH

EPSS probability1.40%

CISA KEVNot currently listed

Published2021-08-17

Last modified2026-06-17

Description

Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13, Thunderbird < 91, Firefox ESR < 78.13, and Firefox < 91.