CVE-2021-43533

Description

When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94.

Weakness classification

• nvd@nist.gov: NVD-CWE-noinfo

Primary references

• security@mozilla.org — Issue Tracking, Permissions Required, Vendor Advisory
• security@mozilla.org — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Permissions Required, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory