CVE-2016-3909
CVE-2016-3909
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 30033990.
CVSS 7.8 · High · EPSS 0.6%
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.securityfocus.com/bid/93296
- http://source.android.com/security/bulletin/2016-10-01.html
- https://android.googlesource.com/platform/frameworks/av/+/c48ef757cc50906e8726a3bebc3b60716292cdba
- https://android.googlesource.com/platform/frameworks/av/+/d4271b792bdad85a80e2b83ab34c4b30b74f53ec
- https://nvd.nist.gov/vuln/detail/CVE-2016-3909