Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-njme-jy8b-xuan
Vulnerability ID VCID-njme-jy8b-xuan
Aliases CVE-2016-1978
Summary Mozilla developer Eric Rescorla reported that a failed allocation during DHE and ECDHE handshakes would lead to a use-after-free vulnerability.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.02458 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2016-15
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1978.json
https://api.first.org/data/v1/epss?cve=CVE-2016-1978
1315565 https://bugzilla.redhat.com/show_bug.cgi?id=1315565
CVE-2016-1978 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1978
GLSA-201605-06 https://security.gentoo.org/glsa/201605-06
mfsa2016-15 https://www.mozilla.org/en-US/security/advisories/mfsa2016-15
RHSA-2016:0591 https://access.redhat.com/errata/RHSA-2016:0591
RHSA-2016:0684 https://access.redhat.com/errata/RHSA-2016:0684
RHSA-2016:0685 https://access.redhat.com/errata/RHSA-2016:0685
USN-2973-1 https://usn.ubuntu.com/2973-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.85482
EPSS Score 0.02458
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T08:26:55.016316+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2016/mfsa2016-15.md 38.6.0