CVE-2016-9035

CVE-2016-9035 describes an exploitable buffer overflow in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. Specifically, the vulnerability occurs in the Ioctl system call when processing the HYPRLOFS_ADD_ENTRIES command on native file systems. An attacker can craft a malicious input to trigger an out-of-bounds memory access, potentially leading to privilege escalation. This vulnerability is rated as High severity with a CVSS score of 7.0. It requires local access and high attack complexity, but no user interaction. A successful exploit could result in complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community attention and media coverage.