Search for vulnerabilities
Vulnerability details: VCID-tpw7-f1vk-3bf4
Vulnerability ID VCID-tpw7-f1vk-3bf4
Aliases CVE-2016-1978
Summary Mozilla developer Eric Rescorla reported that a failed allocation during DHE and ECDHE handshakes would lead to a use-after-free vulnerability.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
epss 0.02754 https://api.first.org/data/v1/epss?cve=CVE-2016-1978
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2016-15
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1978.json
https://api.first.org/data/v1/epss?cve=CVE-2016-1978
1315565 https://bugzilla.redhat.com/show_bug.cgi?id=1315565
CVE-2016-1978 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1978
mfsa2016-15 https://www.mozilla.org/en-US/security/advisories/mfsa2016-15
RHSA-2016:0591 https://access.redhat.com/errata/RHSA-2016:0591
RHSA-2016:0684 https://access.redhat.com/errata/RHSA-2016:0684
RHSA-2016:0685 https://access.redhat.com/errata/RHSA-2016:0685
USN-2973-1 https://usn.ubuntu.com/2973-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.85429
EPSS Score 0.02754
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:10.885762+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2016/mfsa2016-15.md 37.0.0