CVE-2016-5384

HIGH · CVSS 7.8 EPSS 0.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-08-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-5384

Severity

HIGH

CVSS

7.8

EPSS

0.40%

Original NVD Description

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.