CVE-2016-2226

CVE-2016-2226 describes an integer overflow vulnerability in the string_appends function within the libiberty library, specifically in cplus-dem.c. This flaw allows remote attackers to execute arbitrary code by supplying a crafted executable, leading to a buffer overflow. Rated with a CVSS score of 7.8 (HIGH), successful exploitation requires user interaction (UI:R) and could result in high impact to confidentiality, integrity, and availability (C:H/I:H/A:H). While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.