{
  "cveId": "CVE-2021-29955",
  "url": "https://patchblox.com/security/cve/CVE-2021-29955",
  "summary": "CVE-2021-29955 is fixed in 4 products on 2 platforms, first by firefox 87.0\u002Bbuild3-0ubuntu0.18.04.2, released June 24, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Firefox ESR and 1 other: A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker\u2026",
  "description": "A transient execution vulnerability, named Floating Point Value Injection (FPVI) allowed an attacker to leak arbitrary memory addresses and may have also enabled JIT type confusion attacks. (A related vulnerability, Speculative Code Store Bypass (SCSB), did not affect Firefox.). This vulnerability affects Firefox ESR \u003C 78.9 and Firefox \u003C 87.",
  "published": "2021-06-24T07:15:00Z",
  "severity": "Medium",
  "cvss": 5.3,
  "epss": 0.01481,
  "epssPercentile": 0.74118,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2021-29955",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "91.0",
      "fix": "Mozilla Firefox ESR (en-US) 91.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-91.0",
      "released": "2021-08-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "87.0\u002Bbuild3-0ubuntu0.18.04.2",
      "fix": "firefox 87.0\u002Bbuild3-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-87.0-build3-0ubuntu0.18.04.2",
      "released": "2021-06-24T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "87.0\u002Bbuild3-0ubuntu0.18.04.2",
      "fix": "firefox-geckodriver 87.0\u002Bbuild3-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-87.0-build3-0ubuntu0.18.04.2",
      "released": "2021-06-24T07:15:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "87.0\u002Bbuild3-0ubuntu0.18.04.2",
      "fix": "firefox-mozsymbols 87.0\u002Bbuild3-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-87.0-build3-0ubuntu0.18.04.2",
      "released": "2021-06-24T07:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}