CVE-2016-0483

CVE-2016-0483 is an unspecified vulnerability in Oracle Java SE, Java SE Embedded, and JRockit, specifically affecting versions 6u105, 7u91, 8u66, 8u65, and R28.3.8 respectively, as well as Canonical distributions. It is speculated to be a heap-based buffer overflow in the AWT component's readImage function, allowing remote attackers to execute arbitrary code via crafted image data. This vulnerability carries a critical CVSS score of 10.0, indicating a network-based attack with low complexity, leading to complete compromise of confidentiality, integrity, and availability. While the vulnerability is severe and garnered media attention, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog.