CVE-2016-2485

CVE-2016-2485

This page contains facts from public vulnerability sources. Check the original advisory before updating.

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27793367.

CVSS 7.8 · High · EPSS 0.4%

Published

2016-06-13T01:00:00.000Z

Updated

2024-08-05T23:32:20.063Z

Stack: system

Check your server →