CVE
- Id
- 93174
- CVE No.
- CVE-2016-6354
- Status
- Candidate
- Description
- Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial of service or possibly execute arbitrary code via vectors involving num_to_read.
- Phase
- Assigned (20160726)
- Votes
- None (candidate not yet proposed)
- Comments