CVE-2016-1968

—

CVSS 3.0

8.8 high

EPSS

4%p90

Published

Mar 13, 2016 (Mar 13, 2016)

Modified

Jun 17, 2026

Description

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.

Vendors: mozilla
Products: firefox
Weakness: CWE-189
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.1%)

In the news0 stories

No ingested article mentions this CVE yet.