CVE-2016-1956: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (memory consumption or stack memory corruption) by triggering use of a WebGL shader.

Affected products

• Mozilla Firefox: up to and including 44.0.2
• Novell Suse Package Hub For Suse Linux Enterprise: version 12 only
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only

Published 2016-03-13. Last modified 2026-06-17.