CVE-2016-2484
CVE-2016-2484
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793163.
CVSS 7.8 · High · EPSS 0.4%
- Published
- Updated
Stack: system