CVE-2016-1946: Buffer Overflow
The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service (integer overflow and buffer overflow) or possibly have unspecified other impact via crafted metadata.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1946?
CVE-2016-1946 has a moderate severity rating due to potential denial of service risks.
How do I fix CVE-2016-1946?
To fix CVE-2016-1946, update Mozilla Firefox to version 44.0 or later.
Which versions of software are affected by CVE-2016-1946?
CVE-2016-1946 affects Mozilla Firefox versions up to and including 43.0.4 and specific versions of openSUSE.
What impact can CVE-2016-1946 have on my system?
CVE-2016-1946 can lead to integer and buffer overflows, resulting in denial of service or other unspecified impacts.
Is CVE-2016-1946 exploitable by remote attackers?
Yes, CVE-2016-1946 can be exploited by remote attackers to cause a denial of service.