UpHeron
All vulnerabilities

Servers and applications

CVE-2016-10253

An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.

Severity
Critical 9.8
Published
18 Mar 2017
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Erlang/OTPServers and applications · cpe:a:erlang:erlang\/otp
  • Version 19.3.6.9
  • Version 19.3.6.8
  • Version 19.3.6.7
  • Version 19.3.6.6
All 67 release lines
  • Version 18.0-rc1
  • Version 18.0-rc2
  • Version 18.0
  • Version 18.0.1
  • Version 18.0.2
  • Version 18.0.3
  • Version 18.1
  • Version 18.1.1
  • Version 18.1.2
  • Version 18.1.3
  • Version 18.1.4
  • Version 18.1.5
  • Version 18.2
  • Version 18.2.1
  • Version 18.2.2
  • Version 18.2.3
  • Version 18.2.4
  • Version 18.2.4.1
  • Version 18.3
  • Version 18.3.1
  • Version 18.3.2
  • Version 18.3.3
  • Version 18.3.4
  • Version 18.3.4.1
  • Version 18.3.4.2
  • Version 18.3.4.3
  • Version 18.3.4.4
  • Version 18.3.4.5
  • Version 19.0-rc1
  • Version 19.0-rc2
  • Version 19.0
  • Version 19.0.1
  • Version 19.0.2
  • Version 19.0.3
  • Version 19.0.4
  • Version 19.0.5
  • Version 19.0.6
  • Version 19.0.7
  • Version 19.1
  • Version 19.1.1
  • Version 19.1.2
  • Version 19.1.3
  • Version 19.1.4
  • Version 19.1.5
  • Version 19.1.6
  • Version 19.1.6.1
  • Version 19.2
  • Version 19.2.1
  • Version 19.2.2
  • Version 19.2.3
  • Version 19.2.3.1
  • Version 19.3
  • Version 19.3.1
  • Version 19.3.2
  • Version 19.3.3
  • Version 19.3.4
  • Version 19.3.5
  • Version 19.3.6
  • Version 19.3.6.1
  • Version 19.3.6.2
  • Version 19.3.6.3
  • Version 19.3.6.4
  • Version 19.3.6.5
  • Version 19.3.6.6
  • Version 19.3.6.7
  • Version 19.3.6.8
  • Version 19.3.6.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-10253
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-10253