Authored by Tavis Ormandy, Google Security Research

NSS (Network Security Services), Mozilla project’s cross-platform security library, suffers from a memory corruption flaw when validating ECDSA signatures.

advisories | CVE-2021-43527