CVE-2016-6263

Name of the Vulnerable Software and Affected Versions libidn versions prior to 1.33

Description The issue allows context-dependent attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via crafted UTF-8 data. This is due to a problem in the stringprep utf8 nfkc normalize function.

Recommendations For versions prior to 1.33, update to version 1.33 or later to resolve the issue. As a temporary workaround, consider restricting the input of crafted UTF-8 data to the stringprep utf8 nfkc normalize function until a patch is available.