CVE-2016-8388: Iceni Argus

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font's name to a single object within an array of objects.

Affected products

• Iceni Argus: version 6.6.04 only

Published 2017-02-28. Last modified 2026-06-17.