CVE-2016-10649

CVE-2016-10649 affects the frames-compiler project, where the frames-compiler downloads binary resources over unencrypted HTTP. This vulnerability allows for Man-in-the-Middle (MITM) attacks, enabling an attacker to swap legitimate binaries with malicious ones, potentially leading to remote code execution (RCE). Rated with a CVSS score of 8.1 (HIGH), the attack requires high complexity but has no user interaction and can result in full confidentiality, integrity, and availability compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.