CVE-2021-23981 affects multiple packages. A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. See references for individual vulnerability details.