CVE-2016-8714

An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language version 3.3.0. A specially crafted R script can cause a buffer overflow resulting in a memory corruption. An attacker can send a malicious R script to trigger this vulnerability.

• CWE-120

• http://www.debian.org/security/2017/dsa-3813Third Party Advisory
• http://www.securityfocus.com/bid/96785Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0227/Exploit, Technical Description, Third Party Advisory
• http://www.debian.org/security/2017/dsa-3813Third Party Advisory
• http://www.securityfocus.com/bid/96785Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0227/Exploit, Technical Description, Third Party Advisory

Published

Mar 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8708Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8709A remote out of bound write / memory corruption vulnerabilit…7.8
• CVE-2016-8710An exploitable heap write out of bounds vulnerability exists…7.8
• CVE-2016-8711A potential remote code execution vulnerability exists in th…7.8
• CVE-2016-8712An exploitable nonce reuse vulnerability exists in the Web A…8.1
• CVE-2016-8713A remote out of bound write / memory corruption vulnerabilit…7.8
• CVE-2016-8715An exploitable heap corruption vulnerability exists in the l…7.8
• CVE-2016-8716An exploitable Cleartext Transmission of Password vulnerabil…7.5
• CVE-2016-8717An exploitable Use of Hard-coded Credentials vulnerability e…9.8
• CVE-2016-8718An exploitable Cross-Site Request Forgery vulnerability exis…8.8
• CVE-2016-8719An exploitable reflected Cross-Site Scripting vulnerability …6.1
• CVE-2016-8720An exploitable HTTP Header Injection vulnerability exists in…4.3