Lucene search

K
redhatcveRedhat.comRH:CVE-2016-5384
HistoryDec 15, 2016 - 8:18 p.m.

CVE-2016-5384

2016-12-1520:18:56
redhat.com
access.redhat.com
6

0.0004 Low

EPSS

Percentile

5.1%

It was found that cache files were insufficiently validated in fontconfig. A local attacker could create a specially crafted cache file to trigger arbitrary free() calls, which in turn could lead to arbitrary code execution.