CVE-2016-2814 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Firefox

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer11 documents7 sources
Severity
8.8HIGHNVD
EPSS
2.1%
top 15.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Mozilla FirefoxDebian FirefoxDebian Firefox-esr
Timeline
PublishedApr 30
Latest updateMay 17

Description

Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46.0, Firefox ESR 38.x before 38.8, and Firefox ESR 45.x before 45.1 allows remote attackers to execute arbitrary code via crafted CENC offsets that lead to mismanagement of the sizes table.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶Ubuntumozilla/firefox< 46.0+build5-0ubuntu0.14.04.2+3
▶NVDmozilla/firefox45.0.2+16
▶debiandebian/firefox< firefox 46.0-1 (sid)
▶debiandebian/firefox-esr< firefox 46.0-1 (sid)

🔴Vulnerability Details

4
GHSA
GHSA-5w2r-q893-4x6m: Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46↗2022-05-17
▶
OSV
firefox regression↗2016-05-19
▶
OSV
CVE-2016-2814: Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo function in libstagefright in Mozilla Firefox before 46↗2016-04-30
▶
OSV
firefox vulnerabilities↗2016-04-27
▶

📋Vendor Advisories

5
Ubuntu
Firefox regression↗2016-05-19
▶
Ubuntu
Oxygen-GTK3 update↗2016-05-02
▶
Ubuntu
Firefox vulnerabilities↗2016-04-27
▶
Red Hat
Mozilla: Buffer overflow in libstagefright with CENC offsets (MFSA 2016-44)↗2016-04-26
▶
Debian
CVE-2016-2814: firefox - Heap-based buffer overflow in the stagefright::SampleTable::parseSampleCencInfo ...↗2016
▶

💬Community

1
Bugzilla
CVE-2016-2814 Mozilla: Buffer overflow in libstagefright with CENC offsets (MFSA 2016-44)↗2016-04-25
▶