Lucene search

K
cvelistRedhatCVELIST:CVE-2016-5384
HistoryAug 12, 2016 - 4:00 p.m.

CVE-2016-5384

2016-08-1216:00:00
redhat
www.cve.org
1

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

fontconfig before 2.12.1 does not validate offsets, which allows local users to trigger arbitrary free calls and consequently conduct double free attacks and execute arbitrary code via a crafted cache file.