CVE-2016-5271

CVE-2016-5271 describes an out-of-bounds read vulnerability in Mozilla Firefox versions prior to 49.0. This flaw, located in the PropertyProvider::GetSpacingInternal function, can lead to a denial of service (application crash) when processing specific text runs combined with the "display: contents" CSS property. The vulnerability carries a CVSSv3 score of 6.5 (Medium), indicating it can be exploited remotely with low attack complexity, requiring user interaction, and resulting in high availability impact. There is no confidentiality or integrity impact. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, suggesting low public awareness and limited attacker interest.