CVE-2016-1709

CVE-2016-1709 describes a heap-based buffer overflow in the ByteArray::Get method within Google sfntly, impacting Google Chrome versions prior to 52.0.2743.82. This vulnerability allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts by providing a specially crafted SFNT font. With a CVSS score of 8.8 (High), it presents a significant risk due to its network attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, public exploit code, or Metasploit modules, the vulnerability garnered moderate community discussion and media coverage at the time of its disclosure.