CVE-2016-9108

Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc. MuJS before commit b6de34ac6d8bb7dd5461c57940acfbd3ee7fd93e allows attackers to cause a denial of service (application crash) via a crafted regular expression.

• CWE-190

• http://www.openwall.com/lists/oss-security/2016/10/30/12Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/96006Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1390266Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IMPCTUBV2UUTSKAGVAW3EL6HJJWHRZQZ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMI77FMFDWOTUUKKPTQLIB7JEXFTING4/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4FE2LXVJM5PXHUGSFOT2KTA75O5ACV4/
• http://www.openwall.com/lists/oss-security/2016/10/30/12Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/96006Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1390266Issue Tracking, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IMPCTUBV2UUTSKAGVAW3EL6HJJWHRZQZ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WMI77FMFDWOTUUKKPTQLIB7JEXFTING4/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4FE2LXVJM5PXHUGSFOT2KTA75O5ACV4/

Published

Feb 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9102Memory leak in the v9fs_xattrcreate function in hw/9pfs/9p.c…6
• CVE-2016-9103The v9fs_xattrcreate function in hw/9pfs/9p.c in QEMU (aka Q…6
• CVE-2016-9104Multiple integer overflows in the (1) v9fs_xattr_read and (2…4.4
• CVE-2016-9105Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEM…6
• CVE-2016-9106Memory leak in the v9fs_write function in hw/9pfs/9p.c in QE…6
• CVE-2016-9107The OTR plugin for Gajim sends information in cleartext when…
• CVE-2016-9109Artifex Software MuJS allows attackers to cause a denial of …
• CVE-2016-9111Incorrect access control mechanisms in Citrix Receiver Deskt…
• CVE-2016-9112Floating Point Exception (aka FPE or divide by zero) in opj_…
• CVE-2016-9113There is a NULL pointer dereference in function imagetobmp o…
• CVE-2016-9114There is a NULL Pointer Access in function imagetopnm of con…
• CVE-2016-9115Heap Buffer Over-read in function imagetotga of convert.c(jp…