CVE-2016-1935

—

CVSS 3.0

8.8 high

EPSS

5%p92

Published

Jan 31, 2016 (Jan 31, 2016)

Modified

Jun 17, 2026

Description

Buffer overflow in the BufferSubData function in Mozilla Firefox before 44.0 and Firefox ESR 38.x before 38.6 allows remote attackers to execute arbitrary code via crafted WebGL content.

Vendors: opensuse oracle mozilla
Products: leap, opensuse, linux, firefox
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.1%)

In the news0 stories

No ingested article mentions this CVE yet.