CVE-2016-9437

CVE-2016-9437 describes a denial-of-service vulnerability in the Tatsuya Kinoshita w3m fork (before version 0.5.3-31). A remote attacker can exploit this flaw by providing a specially crafted HTML page, leading to a segmentation fault, application crash, and potential memory corruption. The vulnerability has a CVSSv3 score of 6.5 (Medium), indicating it can be exploited over a network with low attack complexity, requiring user interaction, and resulting in high availability impact. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and limited attention from security researchers.