CVE-2016-1970: Integer underflow in the srtp_unprotect function in the WebRTC implementation in Mozilla Firefox before 45....

Security readout for executives and security teams

This is an old Mozilla Firefox WebRTC memory-corruption flaw on Windows. A remote attacker might be able to crash the browser, and the CVE leaves open unspecified additional impact. Business urgency is mainly for environments still running Firefox before 45.0 or unsupported legacy browser images. Exposure is most plausible on legacy Windows systems using Mozilla Firefox versions earlier than 45.0 with WebRTC functionality present. Modern managed browsers should not be exposed if they are regularly updated. The bundle's affected-product section is incomplete, so inventory validation matters. Treat this as a legacy hygiene issue unless old Firefox remains in production. Prioritize rapid remediation where outdated Windows browser images exist, especially on user workstations that browse untrusted content. Mitigation focus: Upgrade Mozilla Firefox to 45.0 or later on Windows systems.; Apply relevant distribution vendor security updates where Firefox is packaged by the OS.; Retire unsupported legacy browser builds from managed endpoints..

Prepared

Jun 13, 2026, 21:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.