PT-2021-23859
CVE-2021-43529
·
Published
2021-11-03
·
Updated
2025-03-19
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 91.3.0
Description
The issue is related to a heap overflow when processing S/MIME messages, specifically those containing certificates with DER-encoded DSA or RSA-PSS signatures.
Recommendations
For Thunderbird versions prior to 91.3.0, update to version 91.3.0 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾