VULNERABILITY INTELLIGENCE

CVE-2016-8385

CVSS score9.3 HIGH
EPSS probability2.25%
CISA KEVNot currently listed
Published2017-02-27
Last modified2026-06-17

Description

An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF to XML a stack variable will be left uninitialized which will later be used to fetch a length that is used in a copy operation. In most ... .