CVE-2016-2499
CVE-2016-2499
This page contains facts from public vulnerability sources. Check the original advisory before updating.
AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 27855172.
CVSS 5.5 · Medium · EPSS 0.4%
- Published
- Updated
Stack: system