CVE-2016-0811: vulnerability facts

CVE-2016-0811

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25800375.

CVSS 7.5 · High · EPSS 0.7%

Published: 2016-02-07T01:00:00.000Z
Updated: 2024-08-05T22:30:05.123Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
android Ubuntu:16.04:LTS
Versions
- 20150818-1500-0ubuntu2
- 20150818-1500-0ubuntu3
- 20160307-0742-0ubuntu3
- 20160330-0939-0ubuntu1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published

Original sources

https://android.googlesource.com/platform%2Fframeworks%2Fav/+/22f824feac43d5758f9a70b77f2aca840ba62c3b
http://source.android.com/security/bulletin/2016-02-01.html
https://nvd.nist.gov/vuln/detail/CVE-2016-0811

Check your server →

CVE-2016-0811

Affected products and versions

n/a

android Ubuntu:16.04:LTS

Original sources