Saturday, November 6, 2021

MFSA2021-48 Firefox: Security Vulnerabilities fixed in Firefox 94 (CVE-2021-38504)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have resulted, leading to memory corruption and a potentially exploitable crash.
Solution(s)
mozilla-firefox-upgrade-94_0


Referenceshttps://attackerkb.com/topics/cve-2021-38504
CVE - 2021-38504
http://www.mozilla.org/security/announce/2021/mfsa2021-48.html