CVE-2016-9136 Information disclosure in n/a

What is CVE-2016-9136?

CVE-2016-9136 is a high-severity vulnerability in n/a, published on 3 Nov 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Artifex Software, Inc. MuJS before a0ceaf5050faf419401fe1b83acfa950ec8a8a89 allows context-dependent attackers to obtain sensitive information by using the "crafted JavaScript" approach, related to a "Buffer Over-read" issue.

Weakness: CWE-119

Which versions are affected by CVE-2016-9136?

It affects 1 product.

Products include Artifex Mujs.

How do I fix CVE-2016-9136?

Apply the vendor's patch.

Is CVE-2016-9136 being exploited?

There is no known exploitation of CVE-2016-9136 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-33796 Use after free in MuJS Critical 10.0
• CVE-2021-33797 Integer overflow in mujs Critical 9.8
• CVE-2021-45005 Memory corruption in n/a Critical 9.8
• CVE-2019-12798 Integer overflow in n/a Critical 9.8
• CVE-2019-11411 Memory corruption in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6rm2-8mpq-5qxw, UBUNTU-CVE-2016-9136.