CVE-2016-3821
CVE-2016-3821
This page contains facts from public vulnerability sources. Check the original advisory before updating.
libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference or memory corruption) via a crafted media file, aka internal bug 28166152.
CVSS 9.8 · Critical · EPSS 1.8%
- Published
- Updated
Stack: system