{"id":"CVE-2021-29978","details":"Multiple low security issues were discovered and fixed in a security audit of Mozilla VPN 2.x branch as part of a 3rd party security audit. This vulnerability affects Mozilla VPN \u003c 2.3.","modified":"2026-07-09T01:25:53.390615Z","published":"2021-08-05T20:15:08.857Z","references":[{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/797"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/798"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/801"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/803"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/804"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/805"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/808"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/809"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/810"},{"type":"ADVISORY","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/812"},{"type":"ADVISORY","url":"https://www.mozilla.org/security/advisories/mfsa2021-31/"},{"type":"FIX","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/pull/816"},{"type":"EVIDENCE","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/799"},{"type":"EVIDENCE","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/800"},{"type":"EVIDENCE","url":"https://github.com/mozilla-mobile/mozilla-vpn-client/issues/806"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mozilla-mobile/mozilla-vpn-client","events":[{"introduced":"0"},{"fixed":"46707e6bf02bc1252ab53908b72c716ba5a1eeeb"}],"database_specific":{"cpe":"cpe:2.3:a:mozilla:mozilla_vpn:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.0"},{"fixed":"2.3"}],"source":"CPE_RANGE"}}],"versions":["v2.1.0","v2.0.3","v2.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29978.json","vanir_signatures_modified":"2026-07-09T01:25:53Z","vanir_signatures":[{"target":{"file":"src/tasks/authenticate/taskauthenticate.cpp"},"deprecated":false,"digest":{"line_hashes":["242845269385789729425996909850675459526","48839660993913130052987421493545864172","146465165643666588836305914378673573212","183566449150846803879227182520822533554","106998597121319061773222726912729208694","285590340921125107381616344130251143202","20972764998622410309660077041758165786","195515157130220801614989672460164467529"],"threshold":0.9},"id":"CVE-2021-29978-1e181dd3","signature_type":"Line","signature_version":"v1","source":"https://github.com/mozilla-mobile/mozilla-vpn-client/commit/46707e6bf02bc1252ab53908b72c716ba5a1eeeb"},{"id":"CVE-2021-29978-93162617","signature_type":"Function","signature_version":"v1","source":"https://github.com/mozilla-mobile/mozilla-vpn-client/commit/46707e6bf02bc1252ab53908b72c716ba5a1eeeb","target":{"function":"TaskAuthenticate::run","file":"src/tasks/authenticate/taskauthenticate.cpp"},"deprecated":false,"digest":{"function_hash":"210460384781796843534317435578731586283","length":1891}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}