Search for vulnerabilities
Vulnerability details: VCID-w7aj-jn2q-juf3
Vulnerability ID VCID-w7aj-jn2q-juf3
Aliases CVE-2016-2814
Summary Using Address Sanitizer, security researcher Sascha Just reported a buffer overflow in the libstagefright library due to issues with the handling of CENC offsets and the sizes table. This results in a potentially exploitable crash triggerable through web content.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
epss 0.02136 https://api.first.org/data/v1/epss?cve=CVE-2016-2814
cvssv2 5.4 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
generic_textual high https://www.mozilla.org/en-US/security/advisories/mfsa2016-44
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2814.json
https://api.first.org/data/v1/epss?cve=CVE-2016-2814
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1330280 https://bugzilla.redhat.com/show_bug.cgi?id=1330280
CVE-2016-2814 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2814
mfsa2016-44 https://www.mozilla.org/en-US/security/advisories/mfsa2016-44
RHSA-2016:0695 https://access.redhat.com/errata/RHSA-2016:0695
USN-2936-1 https://usn.ubuntu.com/2936-1/
No exploits are available.
Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.8349
EPSS Score 0.02136
Published At Aug. 6, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:11.453742+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2016/mfsa2016-44.md 37.0.0