CVE-2016-0811

High

Published: 07/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Integer overflow in the BnCrypto::onTransact function in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information and bypass an unspecified protection mechanism by triggering an improper size calculation.

Risk Assessment

Attackers may gain access to sensitive data, potentially leading to serious security breaches in the Android system.

Recommendation

It is recommended to update the Android system to a version after 2016-02-01 to mitigate this vulnerability.

Other vulnerabilities in libmediaplayerservice

CVE-2017-0770High
CVE-2017-0770 is a privilege escalation vulnerability in the Android media framework (libmediaplayerservice). It affects Android versions from 4.4.4 to 8.0.

Original NVD description (English source)

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25800375.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS