description: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
problem types: Texture upload into an unbound backing buffer resulted in an out-of-bound read
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 78.9, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 87, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 78.9, status: affected, version: unspecified, versionType: custom
}
