CVE-2021-43537: 
NixOS vulnerability analysis and mitigation

CVE-2021-43537 is a heap buffer overflow vulnerability discovered in Mozilla Firefox, Firefox ESR, and Thunderbird browsers. The vulnerability was disclosed on December 7, 2021, and affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. The issue was discovered by bo13oy of Cyber Kunlun Lab (Mozilla Advisory, NVD).

The vulnerability stems from an incorrect type conversion of sizes from 64-bit to 32-bit integers in the nsStructuredCloneContainer::GetDataAsBase64 function. This conversion error allows an attacker to corrupt memory, which can lead to a potentially exploitable crash. The issue occurs specifically when handling structured clone operations (Mozilla Advisory, Bugzilla).

The vulnerability has been rated as having a high impact. When successfully exploited, it could lead to memory corruption and potentially allow arbitrary code execution. The issue affects the browser in contexts where JavaScript is enabled (Mozilla Advisory).

The vulnerability was demonstrated to be exploitable through a proof-of-concept that could trigger a heap buffer overflow. Testing on Firefox 93.0 64-bit showed that the vulnerability could be triggered to cause memory corruption, potentially leading to remote code execution (Bugzilla).

The vulnerability was patched in Firefox 95.0, Firefox ESR 91.4.0, and Thunderbird 91.4.0. Users are advised to upgrade to these versions or later. The fix involves implementing proper checks for integer overflow before performing the size conversion (Mozilla Advisory, Debian Advisory).