CVE-2016-3751
CVE-2016-3751
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23265085.
CVSS 7.8 · High · EPSS 0.5%
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca
- http://www.openwall.com/lists/oss-security/2016/07/09/4
- http://source.android.com/security/bulletin/2016-07-01.html
- https://security.netapp.com/advisory/ntap-20240719-0004/
- https://nvd.nist.gov/vuln/detail/CVE-2016-3751