If you want more information about the vulnerability and mechanisms of exploiting it, project members assigned it CVE-2016-10253 .