CVE-2016-1938

The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Security Services (NSS) before 3.21, as used in Mozilla Firefox before 44.0, improperly divides numbers, which might make it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging use of the (1) mp_div or (2) mp_exptmod function.

• CWE-310

• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
• http://www.debian.org/security/2016/dsa-3688
• http://www.mozilla.org/security/announce/2016/mfsa2016-07.htmlVendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlThird Party Advisory
• http://www.securityfocus.com/bid/81955
• http://www.securityfocus.com/bid/91787Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034825
• http://www.ubuntu.com/usn/USN-2880-1
• http://www.ubuntu.com/usn/USN-2880-2
• http://www.ubuntu.com/usn/USN-2903-1
• http://www.ubuntu.com/usn/USN-2903-2
• http://www.ubuntu.com/usn/USN-2973-1
• https://blog.fuzzing-project.org/37-Mozilla-NSS-Wrong-calculation-results-in-mp_div-and-mp_exptmod.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1190248Issue Tracking
• https://bugzilla.mozilla.org/show_bug.cgi?id=1194947Issue Tracking
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notesVendor Advisory
• https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_div.c
• https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_exptmod.c
• https://hg.mozilla.org/projects/nss/diff/a555bf0fc23a/lib/freebl/mpi/mpi.c
• https://security.gentoo.org/glsa/201605-06
• https://security.gentoo.org/glsa/201701-46
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00001.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00002.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2016-02/msg00010.html
• http://www.debian.org/security/2016/dsa-3688
• http://www.mozilla.org/security/announce/2016/mfsa2016-07.htmlVendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlThird Party Advisory
• http://www.securityfocus.com/bid/81955
• http://www.securityfocus.com/bid/91787Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1034825
• http://www.ubuntu.com/usn/USN-2880-1
• http://www.ubuntu.com/usn/USN-2880-2
• http://www.ubuntu.com/usn/USN-2903-1
• http://www.ubuntu.com/usn/USN-2903-2
• http://www.ubuntu.com/usn/USN-2973-1
• https://blog.fuzzing-project.org/37-Mozilla-NSS-Wrong-calculation-results-in-mp_div-and-mp_exptmod.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=1190248Issue Tracking
• https://bugzilla.mozilla.org/show_bug.cgi?id=1194947Issue Tracking
• https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21_release_notesVendor Advisory
• https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_div.c
• https://github.com/hannob/bignum-fuzz/blob/master/CVE-2016-1938-nss-mp_exptmod.c
• https://hg.mozilla.org/projects/nss/diff/a555bf0fc23a/lib/freebl/mpi/mpi.c
• https://security.gentoo.org/glsa/201605-06
• https://security.gentoo.org/glsa/201701-46

Published

Jan 31, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1929The XS engine in SAP HANA allows remote attackers to spoof l…
• CVE-2016-1930Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2016-1931Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2016-1933Integer overflow in the image-deinterlacing functionality in…
• CVE-2016-1935Buffer overflow in the BufferSubData function in Mozilla Fir…
• CVE-2016-1937The protocol-handler dialog in Mozilla Firefox before 44.0 a…
• CVE-2016-1939Mozilla Firefox before 44.0 stores cookies with names contai…
• CVE-2016-1940Mozilla Firefox before 44.0 on Android allows remote attacke…
• CVE-2016-1941The file-download dialog in Mozilla Firefox before 44.0 on O…
• CVE-2016-1942Mozilla Firefox before 44.0 allows user-assisted remote atta…
• CVE-2016-1943Mozilla Firefox before 44.0 on Android allows remote attacke…
• CVE-2016-1944The Buffer11::NativeBuffer11::map function in ANGLE, as used…