CVE-2016-1887

CVE-2016-1887 is an integer signedness error in the sockargs function of FreeBSD versions 10.1, 10.2, and 10.3. This flaw allows a local attacker to trigger a heap-based buffer overflow by providing a negative buflen argument, leading to a denial of service (kernel panic) or potential privilege escalation. With a CVSS v3 score of 7.8 (High), this vulnerability is easily exploitable locally with low attack complexity, potentially resulting in high impact to confidentiality, integrity, and availability. While not observed in active exploitation and lacking Metasploit or Nuclei modules, a proof-of-concept exploit is publicly available on ExploitDB, though community discussion and media coverage remain minimal.