CVE-2016-5270

CVE-2016-5270 describes a critical heap-based buffer overflow vulnerability in the nsCaseTransformTextRunFactory::TransformString function affecting Mozilla Firefox before version 49.0, Firefox ESR 45.x before 45.4, and Thunderbird before 45.4. This flaw allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts by manipulating Unicode characters during text conversion. With a CVSSv3 score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to high confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.