CVE-2021-29955

A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary memory addresses and may have also…

published June 24, 2021

CVSS
—
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary memory addresses and may have also enabled JIT type confusion attacks. (A related vulnerability, Speculative Code Store Bypass (SCSB), did not affect Firefox.). This vulnerability affects Firefox ESR < 78.9 and Firefox < 87.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01481 · 73.8th percentile
Published
2021-06-24T13:17Z
EPSS history
Timeline
  • 24 JUN 13:17Z
    A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary memory addresses and may have also…
    cvelistv5