AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-1000376

HIGH · CVSS 7 EPSS 0.50% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-06-19 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.0. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-1000376
Severity
HIGH
CVSS
7
EPSS
0.50%

Original NVD Description

libffi requests an executable stack allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. Please note that libffi is used by a number of other libraries. It was previously stated that this affects libffi version 3.2.1 but this appears to be incorrect. libffi prior to version 3.1 on 32 bit x86 systems was vulnerable, and upstream is believed to have fixed this issue in version 3.1.

Related CVEs

Other vulnerabilities affecting the same vendor(s)