CVE-2016-2365: A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin.

Security readout for executives and security teams

Pidgin 2.10.11 can crash when handling malformed MXIT protocol data. The crash can be triggered by a malicious MXIT server or someone able to intercept the traffic. This is an availability issue, not evidence of data theft or code execution in the provided sources. Exposure is likely limited to endpoints using Pidgin 2.10.11 with MXIT protocol connectivity. Organizations without Pidgin, without MXIT usage, or with updated distribution packages are less likely to be affected. Treat as a targeted availability risk for legacy instant messaging clients. Prioritize remediation where Pidgin and MXIT are still used, but this is not supported by the provided evidence as a critical enterprise-wide emergency. Mitigation focus: Identify Pidgin installations and versions, especially 2.10.11.; Check Pidgin and OS vendor advisories for fixed packages.; Apply supported Pidgin or distribution updates where available..

Prepared

Jun 13, 2026, 12:51 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.