Search for vulnerabilities
Vulnerability details: VCID-n28y-9aw4-z3dq
Vulnerability ID VCID-n28y-9aw4-z3dq
Aliases CVE-2016-1962
Summary Security researcher Dominique Hazaël-Massieux reported a use-after-free issue when using multiple WebRTC data channel connections. This causes a potentially exploitable crash when a data channel connection is freed from within a call through it.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
epss 0.04436 https://api.first.org/data/v1/epss?cve=CVE-2016-1962
generic_textual critical https://www.mozilla.org/en-US/security/advisories/mfsa2016-25
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1962.json
https://api.first.org/data/v1/epss?cve=CVE-2016-1962
1315578 https://bugzilla.redhat.com/show_bug.cgi?id=1315578
CVE-2016-1962 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1962
mfsa2016-25 https://www.mozilla.org/en-US/security/advisories/mfsa2016-25
RHSA-2016:0373 https://access.redhat.com/errata/RHSA-2016:0373
USN-2917-1 https://usn.ubuntu.com/2917-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.88606
EPSS Score 0.04436
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:10.092265+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2016/mfsa2016-25.md 37.0.0