CVE-2016-1979
nss: Use-after-free during processing of DER encoded keys in NSS (MFSA 2016-36)
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · March 8, 2016
Updated · June 27, 2026
Description
A use-after-free flaw was found in the way NSS processed certain DER (Distinguished Encoding Rules) encoded cryptographic keys. An attacker could use this flaw to create a specially crafted DER encoded certificate which, when parsed by an application compiled against the NSS library, could cause that application to crash, or execute arbitrary code using the permissions of the user running the application.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 5.1AV:N/AC:H/Au:N/C:P/I:P/A:P
CWE not specified