Search for vulnerabilities
Vulnerability details: VCID-pphb-ty98-tkgx
Vulnerability ID VCID-pphb-ty98-tkgx
Aliases CVE-2016-1979
Summary Mozilla developer Tim Taubert used the Address Sanitizer tool and software fuzzing to discover a use-after-free vulnerability while processing DER encoded keys in the Network Security Services (NSS) libraries. The vulnerability overwrites the freed memory with zeroes. This issue has been addressed in NSS 3.21.1, shipping in Firefox 45.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
epss 0.00905 https://api.first.org/data/v1/epss?cve=CVE-2016-1979
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2016-36
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1979.json
https://api.first.org/data/v1/epss?cve=CVE-2016-1979
1315202 https://bugzilla.redhat.com/show_bug.cgi?id=1315202
CVE-2016-1979 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1979
mfsa2016-36 https://www.mozilla.org/en-US/security/advisories/mfsa2016-36
RHSA-2016:0591 https://access.redhat.com/errata/RHSA-2016:0591
RHSA-2016:0684 https://access.redhat.com/errata/RHSA-2016:0684
RHSA-2016:0685 https://access.redhat.com/errata/RHSA-2016:0685
USN-2973-1 https://usn.ubuntu.com/2973-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.74793
EPSS Score 0.00905
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:13.303136+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2016/mfsa2016-36.md 37.0.0