A use-after-free could have occured when an HTTP2 session object was released on a different thread leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93 Thunderbird < 91.3 and Firefox ESR < 91.3.