CVE-2016-1951

8.6 HIGH
Published: August 07, 2016 Modified: May 06, 2026
View on NVD

Description

Multiple integer overflows in io/prprf.c in Mozilla Netscape Portable Runtime (NSPR) before 4.12 allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long string to a PR_*printf function.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://www.securityfocus.com/bid/92385
Source: security@mozilla.org
http://www.securitytracker.com/id/1036590
Source: security@mozilla.org
http://www.ubuntu.com/usn/USN-3023-1
Source: security@mozilla.org
https://bugzilla.mozilla.org/show_bug.cgi?id=1174015
Source: security@mozilla.org
Issue Tracking
https://groups.google.com/forum/message/raw?msg=mozilla.dev.tech.nspr/dV4MyMsg6jw/hhWcXOgJDQAJ
Source: security@mozilla.org
Mailing List
https://hg.mozilla.org/projects/nspr/rev/96381e3aaae2
Source: security@mozilla.org
http://www.securityfocus.com/bid/92385
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id/1036590
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-3023-1
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.mozilla.org/show_bug.cgi?id=1174015
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
https://groups.google.com/forum/message/raw?msg=mozilla.dev.tech.nspr/dV4MyMsg6jw/hhWcXOgJDQAJ
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing List
https://hg.mozilla.org/projects/nspr/rev/96381e3aaae2
Source: af854a3a-2127-422b-91ae-364da2661108

12 reference(s) from NVD

Quick Stats

CVSS v3 Score
8.6 / 10.0
EPSS (Exploit Probability)
0.8%
75th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-190

Affected Vendors

mozilla

Related CVEs

CVE-2026-48303 10.0
CVE-2026-48292 7.8
CVE-2026-48291 7.8
CVE-2026-47961 5.5
CVE-2026-47960 7.4