VYPR
High severity7.8NVD Advisory· Published Aug 13, 2016· Updated Jun 17, 2026

CVE-2016-5384

CVE-2016-5384

Description

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.