Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-mhmh-rxkf-3fbr
Vulnerability ID VCID-mhmh-rxkf-3fbr
Aliases CVE-2016-1979
Summary Mozilla developer Tim Taubert used the Address Sanitizer tool and software fuzzing to discover a use-after-free vulnerability while processing DER encoded keys in the Network Security Services (NSS) libraries. The vulnerability overwrites the freed memory with zeroes. This issue has been addressed in NSS 3.21.1, shipping in Firefox 45.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00707 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2016-36
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1979.json
https://api.first.org/data/v1/epss?cve=CVE-2016-1979
1315202 https://bugzilla.redhat.com/show_bug.cgi?id=1315202
CVE-2016-1979 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1979
GLSA-201605-06 https://security.gentoo.org/glsa/201605-06
mfsa2016-36 https://www.mozilla.org/en-US/security/advisories/mfsa2016-36
RHSA-2016:0591 https://access.redhat.com/errata/RHSA-2016:0591
RHSA-2016:0684 https://access.redhat.com/errata/RHSA-2016:0684
RHSA-2016:0685 https://access.redhat.com/errata/RHSA-2016:0685
USN-2973-1 https://usn.ubuntu.com/2973-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.72473
EPSS Score 0.00707
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:26:57.532347+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2016/mfsa2016-36.md 38.6.0