VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 13, 2016· Updated May 6, 2026

CVE-2016-2824

CVE-2016-2824

Description

The TSymbolTableLevel class in ANGLE, as used in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 on Windows, allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact by triggering use of a WebGL shader that writes to an array.

Affected products

6
  • Mozilla Corporation/Firefox3 versions
    cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <=46.0.1
    • cpe:2.3:a:mozilla:firefox:45.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mozilla:firefox:45.1.1:*:*:*:*:*:*:*
  • OpenSUSE/Leap
    cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*
  • OpenSUSE/openSUSE2 versions
    cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.