CVE-2020-26972

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 84

Description The issue arises from the lifecycle of IPC Actors, where managed actors can outlive their manager actors. In such cases, the managed actors must ensure they do not attempt to use a dead actor they have a reference to. However, a check for this was omitted in WebGL, resulting in a use-after-free and a potentially exploitable crash.

Recommendations For versions prior to 84, update to version 84 or later to resolve the issue. As a temporary workaround, consider disabling WebGL until a patch is available. Restrict access to WebGL-related functionalities to minimize the risk of exploitation.