CVE-2016-9897: Buffer Overflow
Memory corruption resulting in a potentially exploitable crash during WebGL functions using a vector constructor with a varying array within libGLES.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2016-9897?
CVE-2016-9897 is classified as a moderate severity vulnerability due to potential memory corruption leading to crashes.
How do I fix CVE-2016-9897?
To fix CVE-2016-9897, update affected software to the latest versions such as Firefox 118.0.2-1 or any listed remedial versions for Firefox ESR and Thunderbird.
What software is affected by CVE-2016-9897?
Software affected by CVE-2016-9897 includes various versions of Mozilla Firefox, Firefox ESR, and Thunderbird on specific Linux distributions.
Can CVE-2016-9897 be exploited remotely?
CVE-2016-9897 can potentially be exploited remotely via specially crafted WebGL content in a vulnerable browser.
What types of attacks can CVE-2016-9897 enable?
CVE-2016-9897 may enable attackers to cause application crashes or possibly execute arbitrary code through memory corruption.