CVE-2016-1946

Critical

Published: 31/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The MoofParser::Metadata function in libstagefright in Mozilla Firefox before version 44.0 does not limit the size of read operations, which may allow remote attackers to cause a denial of service (integer overflow and buffer overflow) or possibly have unspecified other impact via crafted metadata.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, affecting the availability of applications and services. Potential consequences may also include other unspecified threats.

Recommendation

It is recommended to update Mozilla Firefox to the latest version to mitigate this vulnerability. Additionally, monitoring and restricting access to the application may help minimize risk.

Original NVD description (English source)

The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service (integer overflow and buffer overflow) or possibly have unspecified other impact via crafted metadata.