CVE-2016-1968: Mozilla Firefox

High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days.

Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted data with brotli compression.

Affected products

• Mozilla Firefox: up to and including 44.0.2

Published 2016-03-13. Last modified 2026-06-17.