description: An issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code that would lead to a potentially exploitable crash. This vulnerability affects Firefox < 91 and Thunderbird < 91.
problem types: Live range splitting could have led to conflicting assignments in the JIT
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 91, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 91, status: affected, version: unspecified, versionType: custom
}
