CVE-2016-2824

CVE-2016-2824 describes an out-of-bounds write vulnerability in the TSymbolTableLevel class of ANGLE, affecting Mozilla Firefox before version 47.0 and Firefox ESR 45.x before 45.2 on Windows. This flaw allows remote attackers to trigger a denial of service (application crash) or potentially achieve other unspecified impacts by enticing a user to visit a malicious website utilizing a specially crafted WebGL shader. With a CVSS v3 score of 8.8 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity and user interaction, leading to high impacts on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, and community discussion is minimal.