cvedb.io
CVE-2016-5258
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2016-08-05T01:59:14.063 · Last modified 2026-06-17T00:49:04.073

Summary

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.

Affected products

oracle — linux

Does this affect you?

Add your gear to cvedb and we'll alert you only when oracle ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.