CVE-2016-3745: vulnerability facts

CVE-2016-3745

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 28173666.

CVSS 9.8 · Critical · EPSS 0.6%

Published: 2016-07-11T01:00:00.000Z
Updated: 2024-08-06T00:03:34.550Z

Stack: system

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
android Ubuntu:16.04:LTS
Versions
- 20150818-1500-0ubuntu2
- 20150818-1500-0ubuntu3
- 20160307-0742-0ubuntu3
- 20160330-0939-0ubuntu1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published

Original sources

https://android.googlesource.com/platform/hardware/qcom/audio/+/073a80800f341325932c66818ce4302b312909a4
http://source.android.com/security/bulletin/2016-07-01.html
https://nvd.nist.gov/vuln/detail/CVE-2016-3745

Check your server →

CVE-2016-3745

Affected products and versions

n/a

android Ubuntu:16.04:LTS

Original sources