{"schemaVersion":3,"id":"CVE-2016-0264","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.","dates":{"published":"2016-05-24T15:00:00.000Z","modified":"2024-08-05T22:15:23.235Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.6,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.03925,"percentile":0.9022,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.03925},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03925,"percentile":0.9022}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.03925,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.03925,"percentile":0.9022}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"ibm","product":"java_sdk","name":"java sdk","label":"java_sdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 6.0.0.0, < 6.0.16.25","noFixRecorded":false,"fixedIn":null},{"text":"≥ 6.1.0.0, < 6.1.8.25","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.0.0.0, < 7.0.9.40","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.1.0.0, < 7.1.3.40","noFixRecorded":false,"fixedIn":null},{"text":"≥ 8.0.0.0, < 8.0.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 6.0.0.0, < 6.0.16.25 | ≥ 6.1.0.0, < 6.1.8.25 | ≥ 7.0.0.0, < 7.0.9.40 | ≥ 7.1.0.0, < 7.1.3.40 | ≥ 8.0.0.0, < 8.0.3.0","eol":null,"hubHref":"/vendor/ibm/java_sdk"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_hpc_node_supplementary","name":"enterprise linux hpc node supplementary","label":"enterprise_linux_hpc_node_supplementary","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_hpc_node_supplementary"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_eus","name":"enterprise linux server eus","label":"enterprise_linux_server_eus","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.7","noFixRecorded":false,"fixedIn":null},{"text":"7.2","noFixRecorded":false,"fixedIn":null},{"text":"7.3","noFixRecorded":false,"fixedIn":null},{"text":"7.4","noFixRecorded":false,"fixedIn":null},{"text":"7.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.7 | 7.2 | 7.3 | 7.4 | 7.5","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0 | 7.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"},{"vendor":"redhat","product":"satellite","name":"satellite","label":"satellite","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.6","noFixRecorded":false,"fixedIn":null},{"text":"5.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.6 | 5.7","eol":null,"hubHref":"/vendor/redhat/satellite"},{"vendor":"suse","product":"linux_enterprise_server","name":"linux enterprise server","label":"linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp4","noFixRecorded":false,"fixedIn":null},{"text":"10:sp4","noFixRecorded":false,"fixedIn":null},{"text":"11:sp2","noFixRecorded":false,"fixedIn":null},{"text":"11:sp3","noFixRecorded":false,"fixedIn":null},{"text":"12:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp4 | 10:sp4 | 11:sp2 | 11:sp3 | 12:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit","name":"linux enterprise software development kit","label":"linux_enterprise_software_development_kit","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp4","noFixRecorded":false,"fixedIn":null},{"text":"12","noFixRecorded":false,"fixedIn":null},{"text":"12:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp4 | 12 | 12:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_software_development_kit"},{"vendor":"suse","product":"manager","name":"manager","label":"manager","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.1","eol":null,"hubHref":"/vendor/suse/manager"},{"vendor":"suse","product":"manager_proxy","name":"manager proxy","label":"manager_proxy","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"2.1","eol":null,"hubHref":"/vendor/suse/manager_proxy"},{"vendor":"suse","product":"openstack_cloud","name":"openstack cloud","label":"openstack_cloud","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5","noFixRecorded":false,"fixedIn":null}],"versionsText":"5","eol":null,"hubHref":"/vendor/suse/openstack_cloud"},{"vendor":"suse","product":"suse_linux_enterprise_server","name":"suse linux enterprise server","label":"suse_linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"12","noFixRecorded":false,"fixedIn":null}],"versionsText":"12","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"sles","label":"SUSE Linux Enterprise Server","category":"os"}},"hubHref":"/vendor/suse/suse_linux_enterprise_server"}],"affectedCount":13,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21980826","label":"www-01.ibm.com/support/docview.wss?uid=swg21980826","hostname":"www-01.ibm.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html","label":"lists.opensuse.org/opensuse-security-announce/2016-05/msg00039.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1039.html","label":"rhn.redhat.com/errata/RHSA-2016-1039.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0701.html","label":"rhn.redhat.com/errata/RHSA-2016-0701.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html","label":"lists.opensuse.org/opensuse-security-announce/2016-05/msg00042.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html","label":"lists.opensuse.org/opensuse-security-announce/2016-06/msg00002.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html","label":"lists.opensuse.org/opensuse-security-announce/2016-05/msg00040.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","label":"access.redhat.com/errata/RHSA-2016:1430","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0708.html","label":"rhn.redhat.com/errata/RHSA-2016-0708.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html","label":"lists.opensuse.org/opensuse-security-announce/2016-05/msg00058.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html","label":"lists.opensuse.org/opensuse-security-announce/2016-05/msg00059.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html","label":"lists.opensuse.org/opensuse-security-announce/2016-05/msg00067.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1IV84035","label":"www-01.ibm.com/support/docview.wss?uid=swg1IV84035","hostname":"www-01.ibm.com","tags":["Vendor Advisory","X Refsource AIXAPAR"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0716.html","label":"rhn.redhat.com/errata/RHSA-2016-0716.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"http://www.securitytracker.com/id/1035953","label":"www.securitytracker.com/id/1035953","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html","label":"lists.opensuse.org/opensuse-security-announce/2016-05/msg00061.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-0702.html","label":"rhn.redhat.com/errata/RHSA-2016-0702.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1216","label":"access.redhat.com/errata/RHSA-2017:1216","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":["RHSA-2016:0701","RHSA-2016:0702","RHSA-2016:0708","RHSA-2016:0716","RHSA-2016:1039","RHSA-2016:1430","RHSA-2017:1216","SUSE-SU-2016:1299-1","SUSE-SU-2016:1300-1","SUSE-SU-2016:1303-1","SUSE-SU-2016:1378-1","SUSE-SU-2016:1379-1","SUSE-SU-2016:1458-1","SUSE-SU-2016:1475-1"],"duplicates":[],"related":["SUSE-SU-2016:1299-1","SUSE-SU-2016:1300-1","SUSE-SU-2016:1303-1","SUSE-SU-2016:1378-1","SUSE-SU-2016:1379-1","SUSE-SU-2016:1458-1","SUSE-SU-2016:1475-1"]},"timeline":[{"kind":"published","date":"2016-05-24T15:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-05T22:15:23.235Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T08:13:51.778Z","stale":false,"partial":false}}