Mozilla · Firefox Esr · CVE-2016-1957
**Name of the Vulnerable Software and Affected Versions**
Mozilla Firefox versions prior to 45.0
Firefox ESR versions prior to 38.7
**Description**
The issue is caused by a buffer overflow in the libstagefright library, which can be exploited by a remote attacker to cause a denial of service (memory consumption) using a specially crafted MPEG-4 file. This file triggers a delete operation on an array, leading to memory leak.
**Recommendations**
For Mozilla Firefox versions prior to 45.0, update to version 45.0 or later to resolve the issue.
For Firefox ESR versions prior to 38.7, update to version 38.7 or later to resolve the issue.