CVE-2016-0836

Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25812590.

Score

CVSS 3.0 7.8 High

Status

Modified - security@android.com

Published

2016-04-18

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Android (Google)

References

• http://source.android.com/security/bulletin/2016-04-02.html
• https://android.googlesource.com/platform/external/libmpeg2/+/8b4ed5a23175b7ffa56eea4678db7287f825e985