{"id":"CVE-2016-1950","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-1950","generatedAt":"2026-10-28T02:17:43.361Z","title":"Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via…","description":"Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to execute arbitrary code via crafted ASN.1 data in an X.509 certificate.","published":"2016-03-13T18:59:00.000Z","lastModified":"2026-06-17T00:42:55.000Z","status":"Modified","sourceIdentifier":"security@mozilla.org","cvss":{"version":"3.0","score":8.8,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},"cwe":["CWE-119"],"affected":["mozilla/network security services","mozilla/firefox","oracle/linux","oracle/vm server","apple/iphone os","apple/mac os x","apple/tvos","apple/watchos","oracle/glassfish server","oracle/iplanet web proxy server","oracle/iplanet web server","opensuse/opensuse"],"epss":{"score":0.04192,"percentile":0.90871,"date":"2026-10-26","history":[{"date":"2026-09-21","score":0.06011,"percentile":0.93076},{"date":"2026-09-22","score":0.04192,"percentile":0.9049}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (4.19%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","tags":["Mailing List"],"source":"security@mozilla.org"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","tags":["Mailing List"],"source":"security@mozilla.org"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","tags":["Mailing List"],"source":"security@mozilla.org"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","tags":["Mailing List"],"source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html","source":"security@mozilla.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0495.html","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3510","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3520","source":"security@mozilla.org"},{"url":"http://www.debian.org/security/2016/dsa-3688","source":"security@mozilla.org"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-35.html","tags":["Vendor Advisory"],"source":"security@mozilla.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"security@mozilla.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"security@mozilla.org"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"http://www.securityfocus.com/bid/84223","source":"security@mozilla.org"},{"url":"http://www.securitytracker.com/id/1035215","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-2","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2917-3","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2924-1","source":"security@mozilla.org"},{"url":"http://www.ubuntu.com/usn/USN-2934-1","source":"security@mozilla.org"},{"url":"https://bto.bluecoat.com/security-advisory/sa119","source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1245528","tags":["Issue Tracking"],"source":"security@mozilla.org"},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.19.2.3_release_notes","tags":["Release Notes"],"source":"security@mozilla.org"},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.1_release_notes","tags":["Release Notes"],"source":"security@mozilla.org"},{"url":"https://security.gentoo.org/glsa/201605-06","source":"security@mozilla.org"},{"url":"https://support.apple.com/HT206166","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"https://support.apple.com/HT206167","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"https://support.apple.com/HT206168","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"https://support.apple.com/HT206169","tags":["Third Party Advisory"],"source":"security@mozilla.org"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html","tags":["Mailing List"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00050.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00016.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0495.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2016/dsa-3688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2016/mfsa2016-35.html","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/84223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1035215","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-1950","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}