CVE-2016-9077

CVE-2016-9077 describes a timing attack vulnerability in Firefox versions prior to 50, where the Canvas element's "feDisplacementMap" filter could be used on cross-origin images. This allowed for pixel-dependent rendering variations, enabling attackers to infer information about third-party images. Rated as High severity (CVSS 7.0), this vulnerability could lead to high confidentiality, integrity, and availability impacts through a local attack requiring user interaction and high attack complexity. There is no evidence of active exploitation, nor are there known public exploit modules or significant community discussion, despite some media coverage at the time of its disclosure.