CVE-2016-5258

HIGH · CVSS 8.8 EPSS 3.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-08-05 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-5258

Severity

HIGH

CVSS

8.8

EPSS

3.26%

Firefox

Original Filing — NVD Description

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.