CVE-2016-1971

High

Published: 13/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before version 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.

Risk Assessment

This vulnerability may lead to system crashes or other unforeseen consequences, posing a threat to application stability and user data security.

Recommendation

It is recommended to update Mozilla Firefox to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in Mozilla Firefox (WebRTC implementation)

CVE-2016-1970High
An integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before version 45.0 on Windows may allow remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact.

Original NVD description (English source)

The I420VideoFrame::CreateFrame function in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows omits an unspecified status check, which might allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.