description: Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.
problem types: Use-after-free of ChannelEventQueue::mOwner
affected:
{
vendor: Mozilla
product: Firefox ESR
versions:
version: unspecified, lessThan: 91.5, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Firefox
versions:
version: unspecified, lessThan: 96, status: affected, versionType: custom
}
{
vendor: Mozilla
product: Thunderbird
versions:
version: unspecified, lessThan: 91.5, status: affected, versionType: custom
}
