CVE-2016-10617

CVE-2016-10617 involves vulnerable box2d-native behavior where binary resources are downloaded over HTTP, enabling man-in-the-middle (MITM) tampering. The provided sources describe that an attacker with a privileged network position can intercept the response and replace the binary with a malicio...