Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.13 Thunderbird < 91 Firefox ESR < 78.13 and Firefox < 91.